From ab1dae942040f6f5fc2484a0a0bbc91d6a83b0dd Mon Sep 17 00:00:00 2001
From: Hari Sekhon <harisekhon@gmail.com>
Date: Fri, 17 Jan 2020 16:33:03 +0000
Subject: [PATCH] added aws_cloudtrails_status.sh

---
 aws_cloudtrails_status.sh | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100755 aws_cloudtrails_status.sh

diff --git a/aws_cloudtrails_status.sh b/aws_cloudtrails_status.sh
new file mode 100755
index 00000000..8c462d2d
--- /dev/null
+++ b/aws_cloudtrails_status.sh
@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+#  vim:ts=4:sts=4:sw=4:et
+#
+#  Author: Hari Sekhon
+#  Date: 2020-01-17 16:24:52 +0000 (Fri, 17 Jan 2020)
+#
+#  https://github.com/harisekhon/bash-tools
+#
+#  License: see accompanying Hari Sekhon LICENSE file
+#
+#  If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
+#
+#  https://www.linkedin.com/in/harisekhon
+#
+
+# Lists Cloud Trails and their status - if they're logging, multi-region and log file validation enabled
+#
+# Output Format:
+#
+# Name      Logging (boolean)   Multi-Region (boolean)    Logfile Validation (boolean)
+
+set -euo pipefail
+[ -n "${DEBUG:-}" ] && set -x
+
+#echo "Getting Cloud Trails" >&2
+aws cloudtrail describe-trails |
+jq -r '.trailList[] | [.Name, .IsMultiRegionTrail, .LogFileValidationEnabled] | @tsv' |
+while read -r name is_multi_region is_validation_enabled; do
+    is_logging="$(
+        aws cloudtrail get-trail-status --name "$name" |
+        jq -r '.IsLogging'
+    )"
+    echo "$name $is_logging $is_multi_region $is_validation_enabled"
+done |
+sort |
+column -t