130 lines
7.9 KiB
JSON
130 lines
7.9 KiB
JSON
{
|
|
"uuid": "e59ad81e-2050-480d-bbae-0e71c607c927",
|
|
"lastMigration": 27,
|
|
"name": "Aws cloudtrail",
|
|
"endpointPrefix": "",
|
|
"latency": 0,
|
|
"port": 3000,
|
|
"hostname": "",
|
|
"folders": [],
|
|
"routes": [
|
|
{
|
|
"uuid": "b5e25f3a-a8e3-4128-9e45-f2654c5a599d",
|
|
"type": "http",
|
|
"documentation": "",
|
|
"method": "post",
|
|
"endpoint": "cloudtrail/gettrailstatus/:islogging",
|
|
"responses": [
|
|
{
|
|
"uuid": "76483999-2022-4610-8e8c-9c0bd535e4c5",
|
|
"body": "{\r\n \"IsLogging\": {{ urlParam 'islogging' 'true' }},\r\n \"LatestCloudWatchLogsDeliveryError\": \"error\",\r\n \"LatestCloudWatchLogsDeliveryTime\": 1683298944.125,\r\n \"LatestDeliveryAttemptSucceeded\": \"2023-05-05T15:02:24Z\",\r\n \"LatestDeliveryAttemptTime\": \"2023-05-05T15:02:24Z\",\r\n \"LatestDeliveryError\": \"error\",\r\n \"LatestDeliveryTime\": 1683298944.125,\r\n \"LatestDigestDeliveryError\": \"error\",\r\n \"LatestDigestDeliveryTime\": 1683298944.125,\r\n \"LatestNotificationAttemptSucceeded\": \"2023-05-05T15:02:24Z\",\r\n \"LatestNotificationAttemptTime\": \"2023-05-05T15:02:24Z\",\r\n \"LatestNotificationError\": \"error\",\r\n \"LatestNotificationTime\": 1683298944.125,\r\n \"StartLoggingTime\": 1683298944.125,\r\n \"StopLoggingTime\": 1683298477.918,\r\n \"TimeLoggingStarted\": \"2023-05-05T15:02:24Z\",\r\n \"TimeLoggingStopped\": \"2023-05-05T14:54:37Z\"\r\n}",
|
|
"latency": 0,
|
|
"statusCode": 200,
|
|
"label": "",
|
|
"headers": [
|
|
{
|
|
"key": "Content-Type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"bodyType": "INLINE",
|
|
"filePath": "",
|
|
"databucketID": "",
|
|
"sendFileAsBody": false,
|
|
"rules": [],
|
|
"rulesOperator": "OR",
|
|
"disableTemplating": false,
|
|
"fallbackTo404": false,
|
|
"default": true
|
|
}
|
|
],
|
|
"enabled": true,
|
|
"responseMode": null
|
|
},
|
|
{
|
|
"uuid": "77f82f1c-b06e-478a-8366-ab325830f00e",
|
|
"type": "http",
|
|
"documentation": "",
|
|
"method": "post",
|
|
"endpoint": "cloudtrail/events/AwsApiCall/:AwsApiCall/AwsServiceEvent/:AwsServiceEvent/AwsConsoleAction/:AwsConsoleAction/AwsConsoleSignIn/:AwsConsoleSignIn/NextToken/:NextToken",
|
|
"responses": [
|
|
{
|
|
"uuid": "7dd41177-8d63-458a-abcc-b3af3ea8c9cd",
|
|
"body": "{\r\n\t\"Events\": [\r\n\t\t{{#each (dataRaw 'Events')}}\r\n\t\t {{#if (gt @index 0)}}\r\n\t\t ,\r\n\t\t {{/if}}\r\n \t\t{\r\n \t\t\t\"AccessKeyId\": \"{{AccessKeyId}}\",\r\n \t\t\t\"CloudTrailEvent\": \"{\\\"awsRegion\\\": \\\"eu-west-1\\\", {{#if Error}}\\\"errorCode\\\": \\\"{{ErrorCode}}\\\", \\\"errorMessage\\\": \\\"{{ErrorMessage}}\\\",{{/if}} \\\"eventCategory\\\": \\\"Management\\\", \\\"eventID\\\": \\\"{{EventId}}\\\", \\\"eventName\\\": \\\"{{EventName}}\\\", \\\"eventSource\\\": \\\"{{EventSource}}\\\", \\\"eventTime\\\": \\\"{{EventTime}}\\\", \\\"eventType\\\": \\\"{{EventType}}\\\", \\\"eventVersion\\\": \\\"1.08\\\", \\\"managementEvent\\\": true, \\\"readOnly\\\": true, \\\"recipientAccountId\\\": \\\"{{AccountId}}\\\", \\\"requestID\\\": \\\"{{ faker 'datatype.uuid' }}\\\", \\\"requestParameters\\\": null, \\\"responseElements\\\": null, \\\"sourceIPAddress\\\": \\\"{{ faker 'internet.ip' }}\\\", \\\"tlsDetails\\\": {\\\"cipherSuite\\\": \\\"ECDHE-RSA-AES128-GCM-SHA256\\\", \\\"clientProvidedHostHeader\\\": \\\"cloudtrail.eu-west-1.amazonaws.com\\\", \\\"tlsVersion\\\": \\\"TLSv1.2\\\"}, \\\"userAgent\\\": \\\"aws-cli/2.11.0 Python/3.11.2 Darwin/22.2.0 source/x86_64 prompt/off command/cloudtrail.lookup-events\\\", \\\"userIdentity\\\": {\\\"accessKeyId\\\": \\\"{{AccessKeyId}}\\\", \\\"accountId\\\": \\\"{{AccountId}}\\\", \\\"arn\\\": \\\"arn:aws:sts::{{AccountId}}:assumed-role/{{UserRole}}/{{UserName}}\\\", \\\"principalId\\\": \\\"{{PrincipalId}}:{{UserName}}\\\", \\\"sessionContext\\\": {\\\"attributes\\\": {\\\"creationDate\\\": \\\"{{ faker 'date.past' EventTime }}\\\", \\\"mfaAuthenticated\\\": \\\"false\\\"}, \\\"sessionIssuer\\\": {\\\"accountId\\\": \\\"{{AccountId}}\\\", \\\"arn\\\": \\\"arn:aws:iam::{{AccountId}}:role/{{UserRole}}\\\", \\\"principalId\\\": \\\"{{PrincipalId}}\\\", \\\"type\\\": \\\"Role\\\", \\\"userName\\\": \\\"{{UserRole}}\\\"}, \\\"webIdFederationData\\\": {}}, \\\"type\\\": \\\"{{ faker 'name.jobArea' }}\\\"}}\",\r\n \t\t\t\"EventId\": \"{{EventId}}\",\r\n \t\t\t\"EventName\": \"{{EventName}}\",\r\n \t\t\t\"EventSource\": \"{{EventSource}}\",\r\n \t\t\t\"EventTime\": \"{{EventTime}}\",\r\n \t\t\t\"ReadOnly\": \"true\",\r\n \t\t\t\"Resources\": [\r\n \t\t\t],\r\n \t\t\t\"Username\": \"{{UserName}}\"\r\n \t\t}\r\n\t\t{{/each}}\r\n\t]\r\n\t{{#if (gte (indexOf (urlParam 'NextToken') 'true' 0) 0)}}\r\n\t {{#unless (includes (stringify (body)) 'NextToken')}}\r\n\t\t ,\"NextToken\": \"{{ faker 'random.alphaNumeric' 64 casing='upper' }}\"\r\n\t\t{{/unless}}\r\n\t{{/if}}\r\n}",
|
|
"latency": 0,
|
|
"statusCode": 200,
|
|
"label": "",
|
|
"headers": [],
|
|
"bodyType": "INLINE",
|
|
"filePath": "",
|
|
"databucketID": "c5kh",
|
|
"sendFileAsBody": false,
|
|
"rules": [],
|
|
"rulesOperator": "OR",
|
|
"disableTemplating": false,
|
|
"fallbackTo404": false,
|
|
"default": true
|
|
}
|
|
],
|
|
"enabled": true,
|
|
"responseMode": null
|
|
}
|
|
],
|
|
"rootChildren": [
|
|
{
|
|
"type": "route",
|
|
"uuid": "b5e25f3a-a8e3-4128-9e45-f2654c5a599d"
|
|
},
|
|
{
|
|
"type": "route",
|
|
"uuid": "77f82f1c-b06e-478a-8366-ab325830f00e"
|
|
}
|
|
],
|
|
"proxyMode": false,
|
|
"proxyHost": "",
|
|
"proxyRemovePrefix": false,
|
|
"tlsOptions": {
|
|
"enabled": false,
|
|
"type": "CERT",
|
|
"pfxPath": "",
|
|
"certPath": "",
|
|
"keyPath": "",
|
|
"caPath": "",
|
|
"passphrase": ""
|
|
},
|
|
"cors": true,
|
|
"headers": [
|
|
{
|
|
"key": "Content-Type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"proxyReqHeaders": [
|
|
{
|
|
"key": "",
|
|
"value": ""
|
|
}
|
|
],
|
|
"proxyResHeaders": [
|
|
{
|
|
"key": "",
|
|
"value": ""
|
|
}
|
|
],
|
|
"data": [
|
|
{
|
|
"uuid": "76dec2a5-ff63-4e81-9611-94b900ab16e1",
|
|
"id": "c5kh",
|
|
"name": "EventsData",
|
|
"documentation": "",
|
|
"value": "[\n {{#each (dataRaw 'EventsTypeData')}}\n {{#if (gte @isEvent 1)}}\n ,\n {{/if}}\n {{setVar 'isEvent' (add (urlParam name) @isEvent)}}\n {{#repeat (urlParam name comma=true)}}\n {\n \"AccessKeyId\": \"{{ faker 'random.alphaNumeric' 20 casing='upper' }}\",\n \"AccountId\": \"{{ faker 'random.numeric' 12 }}\",\n \"Error\": {{error}},\n {{#if error}}\n \"ErrorCode\": \"{{errorCode}}\",\n\t \"ErrorMessage\": \"{{errorMessage}}\",\n {{/if}}\n \"EventId\": \"{{ faker 'datatype.uuid' }}\",\n \"EventName\": \"{{oneOf (array 'LookupEvents' 'ListInstanceAssociations' 'AssumeRoleWithWebIdentity')}}\",\n \"EventSource\": \"{{oneOf (array 'cloudtrail.amazonaws.com' 'ssm.amazonaws.com' 'sts.amazonaws.com')}}\",\n \"EventTime\": \"{{ faker 'date.recent' }}\",\n \"EventType\": \"{{name}}\",\n \"PrincipalId\": \"{{ faker 'random.alphaNumeric' 20 casing='upper' }}\",\n \"UserName\": \"{{ faker 'internet.userName' }}\",\n \"UserRole\": \"{{ faker 'name.jobType' }}\"\n }\n {{/repeat}}\n {{/each}}\n]"
|
|
},
|
|
{
|
|
"uuid": "5dce6340-bade-4336-8041-50fd22570055",
|
|
"id": "nu28",
|
|
"name": "EventsTypeData",
|
|
"documentation": "",
|
|
"value": "[\n {\n \"name\": \"AwsApiCall\",\n \"error\": false\n },\n {\n \"name\": \"AwsServiceEvent\",\n \"error\": false\n },\n {\n \"name\": \"AwsConsoleAction\",\n \"error\": true,\n \t\"errorCode\": \"ThrottlingException\",\n \t\"errorMessage\": \"Rate exceeded error\"\n },\n {\n \"name\": \"AwsConsoleSignIn\",\n \"error\": true,\n \"errorCode\": \"LoginErrorException\",\n \"errorMessage\": \"Login error\"\n }\n]"
|
|
}
|
|
]
|
|
} |