|
|
|
#!/usr/bin/env bash
|
|
|
|
# vim:ts=4:sts=4:sw=4:et
|
|
|
|
#
|
|
|
|
# Author: Hari Sekhon
|
|
|
|
# Date: 2020-01-17 16:24:52 +0000 (Fri, 17 Jan 2020)
|
|
|
|
#
|
|
|
|
# https://github.com/harisekhon/bash-tools
|
|
|
|
#
|
|
|
|
# License: see accompanying Hari Sekhon LICENSE file
|
|
|
|
#
|
|
|
|
# If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
|
|
|
|
#
|
|
|
|
# https://www.linkedin.com/in/harisekhon
|
|
|
|
#
|
|
|
|
|
|
|
|
set -euo pipefail
|
|
|
|
[ -n "${DEBUG:-}" ] && set -x
|
|
|
|
srcdir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
|
|
|
|
|
|
# shellcheck disable=SC1090
|
|
|
|
. "$srcdir/lib/aws.sh"
|
|
|
|
|
|
|
|
# shellcheck disable=SC2034,SC2154
|
|
|
|
usage_description="
|
|
|
|
Lists Cloud Trails and their status - if they're logging, multi-region and log file validation enabled
|
|
|
|
|
|
|
|
Output Format:
|
|
|
|
|
|
|
|
Name Logging (boolean) Multi-Region (boolean) Logfile Validation (boolean)
|
|
|
|
|
|
|
|
|
|
|
|
$usage_aws_cli_required
|
|
|
|
"
|
|
|
|
|
|
|
|
# used by usage() in lib/utils.sh
|
|
|
|
# shellcheck disable=SC2034
|
|
|
|
usage_args=""
|
|
|
|
|
|
|
|
help_usage "$@"
|
|
|
|
|
|
|
|
export AWS_DEFAULT_OUTPUT=json
|
|
|
|
|
|
|
|
#echo "Getting Cloud Trails" >&2
|
|
|
|
aws cloudtrail describe-trails --no-paginate |
|
|
|
|
jq -r '.trailList[] | [.Name, .IsMultiRegionTrail, .LogFileValidationEnabled] | @tsv' |
|
|
|
|
while read -r name is_multi_region is_validation_enabled; do
|
|
|
|
is_logging="$(
|
|
|
|
aws cloudtrail get-trail-status --name "$name" |
|
|
|
|
jq -r '.IsLogging'
|
|
|
|
)"
|
|
|
|
echo "$name $is_logging $is_multi_region $is_validation_enabled"
|
|
|
|
done |
|
|
|
|
sort |
|
|
|
|
column -t
|