added aws_cloudtrails_status.sh

aws_cloudtrails_status.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+#  vim:ts=4:sts=4:sw=4:et
+#
+#  Author: Hari Sekhon
+#  Date: 2020-01-17 16:24:52 +0000 (Fri, 17 Jan 2020)
+#
+#  https://github.com/harisekhon/bash-tools
+#
+#  License: see accompanying Hari Sekhon LICENSE file
+#
+#  If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
+#
+#  https://www.linkedin.com/in/harisekhon
+#
+
+# Lists Cloud Trails and their status - if they're logging, multi-region and log file validation enabled
+#
+# Output Format:
+#
+# Name      Logging (boolean)   Multi-Region (boolean)    Logfile Validation (boolean)
+
+set -euo pipefail
+[ -n "${DEBUG:-}" ] && set -x
+
+#echo "Getting Cloud Trails" >&2
+aws cloudtrail describe-trails |
+jq -r '.trailList[] | [.Name, .IsMultiRegionTrail, .LogFileValidationEnabled] | @tsv' |
+while read -r name is_multi_region is_validation_enabled; do
+    is_logging="$(
+        aws cloudtrail get-trail-status --name "$name" |
+        jq -r '.IsLogging'
+    )"
+    echo "$name $is_logging $is_multi_region $is_validation_enabled"
+done |
+sort |
+column -t