{
  "uuid": "e59ad81e-2050-480d-bbae-0e71c607c927",
  "lastMigration": 27,
  "name": "Aws cloudtrail",
  "endpointPrefix": "",
  "latency": 0,
  "port": 3000,
  "hostname": "",
  "folders": [],
  "routes": [
    {
      "uuid": "b5e25f3a-a8e3-4128-9e45-f2654c5a599d",
      "type": "http",
      "documentation": "",
      "method": "post",
      "endpoint": "cloudtrail/gettrailstatus/:islogging",
      "responses": [
        {
          "uuid": "76483999-2022-4610-8e8c-9c0bd535e4c5",
          "body": "{\r\n   \"IsLogging\": {{ urlParam 'islogging' 'true' }},\r\n   \"LatestCloudWatchLogsDeliveryError\": \"error\",\r\n   \"LatestCloudWatchLogsDeliveryTime\": 1683298944.125,\r\n   \"LatestDeliveryAttemptSucceeded\": \"2023-05-05T15:02:24Z\",\r\n   \"LatestDeliveryAttemptTime\": \"2023-05-05T15:02:24Z\",\r\n   \"LatestDeliveryError\": \"error\",\r\n   \"LatestDeliveryTime\": 1683298944.125,\r\n   \"LatestDigestDeliveryError\": \"error\",\r\n   \"LatestDigestDeliveryTime\": 1683298944.125,\r\n   \"LatestNotificationAttemptSucceeded\": \"2023-05-05T15:02:24Z\",\r\n   \"LatestNotificationAttemptTime\": \"2023-05-05T15:02:24Z\",\r\n   \"LatestNotificationError\": \"error\",\r\n   \"LatestNotificationTime\": 1683298944.125,\r\n   \"StartLoggingTime\": 1683298944.125,\r\n   \"StopLoggingTime\": 1683298477.918,\r\n   \"TimeLoggingStarted\": \"2023-05-05T15:02:24Z\",\r\n   \"TimeLoggingStopped\": \"2023-05-05T14:54:37Z\"\r\n}",
          "latency": 0,
          "statusCode": 200,
          "label": "",
          "headers": [
            {
              "key": "Content-Type",
              "value": "application/json"
            }
          ],
          "bodyType": "INLINE",
          "filePath": "",
          "databucketID": "",
          "sendFileAsBody": false,
          "rules": [],
          "rulesOperator": "OR",
          "disableTemplating": false,
          "fallbackTo404": false,
          "default": true
        }
      ],
      "enabled": true,
      "responseMode": null
    },
    {
      "uuid": "77f82f1c-b06e-478a-8366-ab325830f00e",
      "type": "http",
      "documentation": "",
      "method": "post",
      "endpoint": "cloudtrail/events/AwsApiCall/:AwsApiCall/AwsServiceEvent/:AwsServiceEvent/AwsConsoleAction/:AwsConsoleAction/AwsConsoleSignIn/:AwsConsoleSignIn/NextToken/:NextToken",
      "responses": [
        {
          "uuid": "7dd41177-8d63-458a-abcc-b3af3ea8c9cd",
          "body": "{\r\n\t\"Events\": [\r\n\t\t{{#each (dataRaw 'Events')}}\r\n\t\t  {{#if (gt @index 0)}}\r\n\t\t    ,\r\n\t\t  {{/if}}\r\n  \t\t{\r\n  \t\t\t\"AccessKeyId\": \"{{AccessKeyId}}\",\r\n  \t\t\t\"CloudTrailEvent\": \"{\\\"awsRegion\\\": \\\"eu-west-1\\\", {{#if Error}}\\\"errorCode\\\": \\\"{{ErrorCode}}\\\", \\\"errorMessage\\\": \\\"{{ErrorMessage}}\\\",{{/if}} \\\"eventCategory\\\": \\\"Management\\\", \\\"eventID\\\": \\\"{{EventId}}\\\", \\\"eventName\\\": \\\"{{EventName}}\\\", \\\"eventSource\\\": \\\"{{EventSource}}\\\", \\\"eventTime\\\": \\\"{{EventTime}}\\\", \\\"eventType\\\": \\\"{{EventType}}\\\", \\\"eventVersion\\\": \\\"1.08\\\", \\\"managementEvent\\\": true, \\\"readOnly\\\": true, \\\"recipientAccountId\\\": \\\"{{AccountId}}\\\", \\\"requestID\\\": \\\"{{ faker 'datatype.uuid' }}\\\", \\\"requestParameters\\\": null, \\\"responseElements\\\": null, \\\"sourceIPAddress\\\": \\\"{{ faker 'internet.ip' }}\\\", \\\"tlsDetails\\\": {\\\"cipherSuite\\\": \\\"ECDHE-RSA-AES128-GCM-SHA256\\\", \\\"clientProvidedHostHeader\\\": \\\"cloudtrail.eu-west-1.amazonaws.com\\\", \\\"tlsVersion\\\": \\\"TLSv1.2\\\"}, \\\"userAgent\\\": \\\"aws-cli/2.11.0 Python/3.11.2 Darwin/22.2.0 source/x86_64 prompt/off command/cloudtrail.lookup-events\\\", \\\"userIdentity\\\": {\\\"accessKeyId\\\": \\\"{{AccessKeyId}}\\\", \\\"accountId\\\": \\\"{{AccountId}}\\\", \\\"arn\\\": \\\"arn:aws:sts::{{AccountId}}:assumed-role/{{UserRole}}/{{UserName}}\\\", \\\"principalId\\\": \\\"{{PrincipalId}}:{{UserName}}\\\", \\\"sessionContext\\\": {\\\"attributes\\\": {\\\"creationDate\\\": \\\"{{ faker 'date.past' EventTime }}\\\", \\\"mfaAuthenticated\\\": \\\"false\\\"}, \\\"sessionIssuer\\\": {\\\"accountId\\\": \\\"{{AccountId}}\\\", \\\"arn\\\": \\\"arn:aws:iam::{{AccountId}}:role/{{UserRole}}\\\", \\\"principalId\\\": \\\"{{PrincipalId}}\\\", \\\"type\\\": \\\"Role\\\", \\\"userName\\\": \\\"{{UserRole}}\\\"}, \\\"webIdFederationData\\\": {}}, \\\"type\\\": \\\"{{ faker 'name.jobArea' }}\\\"}}\",\r\n  \t\t\t\"EventId\": \"{{EventId}}\",\r\n  \t\t\t\"EventName\": \"{{EventName}}\",\r\n  \t\t\t\"EventSource\": \"{{EventSource}}\",\r\n  \t\t\t\"EventTime\": \"{{EventTime}}\",\r\n  \t\t\t\"ReadOnly\": \"true\",\r\n  \t\t\t\"Resources\": [\r\n  \t\t\t],\r\n  \t\t\t\"Username\": \"{{UserName}}\"\r\n  \t\t}\r\n\t\t{{/each}}\r\n\t]\r\n\t{{#if (gte (indexOf (urlParam 'NextToken') 'true' 0) 0)}}\r\n\t  {{#unless (includes (stringify (body)) 'NextToken')}}\r\n\t\t  ,\"NextToken\": \"{{ faker 'random.alphaNumeric' 64 casing='upper' }}\"\r\n\t\t{{/unless}}\r\n\t{{/if}}\r\n}",
          "latency": 0,
          "statusCode": 200,
          "label": "",
          "headers": [],
          "bodyType": "INLINE",
          "filePath": "",
          "databucketID": "c5kh",
          "sendFileAsBody": false,
          "rules": [],
          "rulesOperator": "OR",
          "disableTemplating": false,
          "fallbackTo404": false,
          "default": true
        }
      ],
      "enabled": true,
      "responseMode": null
    }
  ],
  "rootChildren": [
    {
      "type": "route",
      "uuid": "b5e25f3a-a8e3-4128-9e45-f2654c5a599d"
    },
    {
      "type": "route",
      "uuid": "77f82f1c-b06e-478a-8366-ab325830f00e"
    }
  ],
  "proxyMode": false,
  "proxyHost": "",
  "proxyRemovePrefix": false,
  "tlsOptions": {
    "enabled": false,
    "type": "CERT",
    "pfxPath": "",
    "certPath": "",
    "keyPath": "",
    "caPath": "",
    "passphrase": ""
  },
  "cors": true,
  "headers": [
    {
      "key": "Content-Type",
      "value": "application/json"
    }
  ],
  "proxyReqHeaders": [
    {
      "key": "",
      "value": ""
    }
  ],
  "proxyResHeaders": [
    {
      "key": "",
      "value": ""
    }
  ],
  "data": [
    {
      "uuid": "76dec2a5-ff63-4e81-9611-94b900ab16e1",
      "id": "c5kh",
      "name": "EventsData",
      "documentation": "",
      "value": "[\n  {{#each (dataRaw 'EventsTypeData')}}\n    {{#if (gte @isEvent 1)}}\n    ,\n    {{/if}}\n    {{setVar 'isEvent' (add (urlParam name) @isEvent)}}\n    {{#repeat (urlParam name comma=true)}}\n      {\n        \"AccessKeyId\": \"{{ faker 'random.alphaNumeric' 20 casing='upper' }}\",\n        \"AccountId\": \"{{ faker 'random.numeric' 12 }}\",\n        \"Error\": {{error}},\n        {{#if error}}\n        \"ErrorCode\": \"{{errorCode}}\",\n\t      \"ErrorMessage\": \"{{errorMessage}}\",\n        {{/if}}\n        \"EventId\": \"{{ faker 'datatype.uuid' }}\",\n        \"EventName\": \"{{oneOf (array 'LookupEvents' 'ListInstanceAssociations' 'AssumeRoleWithWebIdentity')}}\",\n        \"EventSource\": \"{{oneOf (array 'cloudtrail.amazonaws.com' 'ssm.amazonaws.com' 'sts.amazonaws.com')}}\",\n        \"EventTime\": \"{{ faker 'date.recent' }}\",\n        \"EventType\": \"{{name}}\",\n        \"PrincipalId\": \"{{ faker 'random.alphaNumeric' 20 casing='upper' }}\",\n        \"UserName\": \"{{ faker 'internet.userName' }}\",\n        \"UserRole\": \"{{ faker 'name.jobType' }}\"\n      }\n    {{/repeat}}\n  {{/each}}\n]"
    },
    {
      "uuid": "5dce6340-bade-4336-8041-50fd22570055",
      "id": "nu28",
      "name": "EventsTypeData",
      "documentation": "",
      "value": "[\n  {\n    \"name\": \"AwsApiCall\",\n    \"error\": false\n  },\n  {\n    \"name\": \"AwsServiceEvent\",\n    \"error\": false\n  },\n  {\n    \"name\": \"AwsConsoleAction\",\n    \"error\": true,\n  \t\"errorCode\": \"ThrottlingException\",\n  \t\"errorMessage\": \"Rate exceeded error\"\n  },\n  {\n    \"name\": \"AwsConsoleSignIn\",\n    \"error\": true,\n    \"errorCode\": \"LoginErrorException\",\n    \"errorMessage\": \"Login error\"\n  }\n]"
    }
  ]
}