AWS Data Sources

Name	Platform	Sourcetype	Source	Supported TA	Date
AWS CloudTrail DeleteLoggingConfiguration	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteRuleGroup	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DescribeSnapshotAttribute	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
ASL AWS CloudTrail	AWS	aws:asl	aws_asl	Splunk Add-on for AWS
AWS Cloudfront	AWS	aws:cloudfront:accesslogs	aws	Splunk Add-on for AWS
AWS CloudTrail AssumeRoleWithSAML	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail ConsoleLogin	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CopyObject	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreateAccessKey	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreateKey	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreateLoginProfile	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreateNetworkAclEntry	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreatePolicyVersion	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreateSnapshot	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreateTask	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail CreateVirtualMFADevice	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeactivateMFADevice	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteAccountPasswordPolicy	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteAlarms	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteDetector	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteGroup	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteIPSet	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteLogGroup	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteLogStream	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteNetworkAclEntry	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeletePolicy	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteRule	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteSnapshot	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteTrail	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteVirtualMFADevice	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteWebACL	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DescribeEventAggregates	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DescribeImageScanFindings	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail GetAccountPasswordPolicy	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail GetObject	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail GetPasswordData	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail JobCreated	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail ModifyDBInstance	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail ModifyImageAttribute	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail ModifySnapshotAttribute	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail PutBucketAcl	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail PutBucketLifecycle	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail PutBucketReplication	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail PutBucketVersioning	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail PutImage	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail PutKeyPolicy	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail ReplaceNetworkAclEntry	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail SetDefaultPolicyVersion	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail StopLogging	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail UpdateAccountPasswordPolicy	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail UpdateLoginProfile	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail UpdateSAMLProvider	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail UpdateTrail	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudWatchLogs VPCflow	AWS	aws:cloudwatchlogs:vpcflow	aws_cloudwatchlogs_vpcflow	Splunk Add-on for AWS
AWS Security Hub	AWS	aws:securityhub:finding	aws_securityhub_finding	Splunk Add-on for AWS
GitHub Webhooks	AWS	aws:firehose:json	github	N/A
AWS CloudTrail	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteGuardrail	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteKnowledgeBase	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail DeleteModelInvocationLoggingConfiguration	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail InvokeModel	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS
AWS CloudTrail ListFoundationModels	AWS	aws:cloudtrail	aws_cloudtrail	Splunk Add-on for AWS