Add to Docker Desktop
Version 4.43 or later needs to be installed to add the server automatically
Tools
| Name | Description |
|---|---|
lookup_events | Look up CloudTrail events based on various criteria. This tool searches CloudTrail events using the LookupEvents API, which provides access to the last 90 days of management events. You can filter by time range and search for specific attribute values. Usage: Use this tool to find CloudTrail events by various attributes like username, event name, resource name, etc. This is useful for security investigations, troubleshooting, and audit trails. IMPORTANT PAGINATION REQUIREMENTS: - AWS CloudTrail requires pagination tokens to be used with exactly the same parameters as the original request - When using next_token, you must provide the exact same start_time, end_time, attribute_key, and attribute_value - Use the 'query_params' returned in the response for subsequent paginated requests Returns: -------- Dictionary containing: - events: List of CloudTrail events matching the criteria with exact CloudTrail schema - next_token: Token for pagination if more results available - query_params: Parameters used for the query (includes pagination parameters when next_token is present) |