Skip to content

aws.cloudtrail: Fix lambda events parsing of vpcConfig.securityGroupIds and vpcConfig.subnetIds fields #17064

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
kcreddy merged 2 commits into from
Jan 27, 2026
Merged

aws.cloudtrail: Fix lambda events parsing of vpcConfig.securityGroupIds and vpcConfig.subnetIds fields #17064

kcreddy merged 2 commits into from
Jan 27, 2026
+43 −4

Conversation

@kcreddy
Copy link
Contributor

@kcreddy kcreddy commented Jan 27, 2026

Proposed commit message

Backport of #16991

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

Pipeline tests successful on new sample log.

--- Test results for package: aws - START ---
╭─────────┬─────────────┬───────────┬────────────────────────────────────────────────────────────────────────────────┬────────┬──────────────╮
│ PACKAGE │ DATA STREAM │ TEST TYPE │ TEST NAME                                                                      │ RESULT │ TIME ELAPSED │
├─────────┼─────────────┼───────────┼────────────────────────────────────────────────────────────────────────────────┼────────┼──────────────┤
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-add-permission-json.log)                        │ PASS   │ 401.744375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-add-user-to-group-json.log)                     │ PASS   │ 382.040959ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-assume-role-json.log)                           │ PASS   │ 380.172542ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-group-policy-json.log)                   │ PASS   │ 371.195458ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-role-policy-json.log)                    │ PASS   │ 374.827875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-user-policy-json.log)                    │ PASS   │ 404.745834ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-user-role-json.log)                      │ PASS   │ 369.755208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-authorize-security-group-egress-json.log)       │ PASS   │   397.6515ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-authorize-security-group-ingress-json.log)      │ PASS   │ 3.401735916s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-batch-get-secret-value-json.log)                │ PASS   │ 911.518417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-change-password-json.log)                       │ PASS   │ 356.423125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-cloudtrail-digest-json.log)                     │ PASS   │ 407.972666ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-console-login-json.log)                         │ PASS   │ 361.144375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-converse-json.log)                              │ PASS   │ 357.271125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-copy-object-json-minimal.log)                   │ PASS   │ 376.972291ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-copy-object-json.log)                           │ PASS   │ 358.826458ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-access-key-json.log)                     │ PASS   │   364.9275ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-control-channel-json.log)                │ PASS   │ 377.535167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-db-instance-json.log)                    │ PASS   │ 3.175408375s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-detector-json.log)                       │ PASS   │     1.39412s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-document-json.log)                       │ PASS   │ 353.505208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-group-json.log)                          │ PASS   │ 377.642917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-key-pair-json.log)                       │ PASS   │ 369.270084ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-lambda-json.log)                         │ PASS   │ 370.352167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-policy-json.log)                         │ PASS   │ 369.944292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-stack-json.log)                          │ PASS   │    368.928ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-stack-set-json.log)                      │ PASS   │ 371.565209ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-topic-json.log)                          │ PASS   │ 513.298541ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-filter-response-json.log) │ PASS   │ 3.389744208s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-filter-rule-json.log)     │ PASS   │ 368.447833ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-session-request-json.log) │ PASS   │ 407.653792ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-target-json.log)          │ PASS   │  393.16075ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-trail-json.log)                          │ PASS   │ 398.041417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-trust-anchor-json.log)                   │ PASS   │ 409.310625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-user-json.log)                           │ PASS   │  402.77325ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-virtual-mfa-device-json.log)             │ PASS   │  376.22725ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-deactivate-mfa-device-json.log)                 │ PASS   │ 512.193583ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-access-key-json.log)                     │ PASS   │ 371.258959ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-alarms-json.log)                         │ PASS   │ 371.317334ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-bucket-json.log)                         │ PASS   │ 400.863416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-db-cluster-json.log)                     │ PASS   │ 409.412625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-db-instance-json.log)                    │ PASS   │ 388.184875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-detector-json.log)                       │ PASS   │   402.1485ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-file-system-json.log)                    │ PASS   │ 384.787541ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-flow-log-json.log)                       │ PASS   │ 441.049875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-global-cluster-json.log)                 │ PASS   │   365.0425ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-group-json.log)                          │ PASS   │ 867.318542ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-log-group-json.log)                      │ PASS   │ 2.660507125s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-log-stream-json.log)                     │ PASS   │ 350.714792ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-mount-target-json.log)                   │ PASS   │ 374.629208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-network-acl-entry-json.log)              │ PASS   │ 355.854417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-network-acl-json.log)                    │ PASS   │ 378.919167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-resolver-query-log-config-json.log)      │ PASS   │ 389.784083ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-rule-group-json.log)                     │ PASS   │ 390.666333ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-rule-json.log)                           │ PASS   │ 374.868209ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-ssh-public-key-json.log)                 │ PASS   │ 355.727125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-trail-json.log)                          │ PASS   │ 415.999459ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-user-json.log)                           │ PASS   │ 3.648867625s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-virtual-mfa-device-json.log)             │ PASS   │ 350.698208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-web-acl-json.log)                        │ PASS   │ 397.240792ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-disable-key-json.log)                           │ PASS   │ 353.037958ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-enable-mfa-device-json.log)                     │ PASS   │  373.34075ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-bucket-policy-json.log)                     │ PASS   │ 397.776958ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-caller-identity-json.log)                   │ PASS   │ 402.643667ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-parameter-json.log)                         │ PASS   │ 398.739875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-parameters-json.log)                        │ PASS   │ 368.241333ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-password-data-json.log)                     │ PASS   │ 665.414625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-policy-json.log)                            │ PASS   │ 3.063852292s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-secret-value-json.log)                      │ PASS   │ 368.401375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-insight-json.log)                               │ PASS   │ 349.775125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-list-attached-role-policies-json.log)           │ PASS   │ 380.085375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-cluster-json.log)                     │ PASS   │   349.2575ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-cluster-snapshot-attribute-json.log)  │ PASS   │   364.7385ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-instance-json.log)                    │ PASS   │ 364.650834ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-snapshot-attributte-json.log)         │ PASS   │   369.0915ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-image-attribute-json.log)                │ PASS   │ 380.444292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-snapshot-attribute-json.log)             │ PASS   │ 3.662820875s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-open-control-channel-json.log)                  │ PASS   │ 705.851125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-publish-json.log)                               │ PASS   │ 346.853583ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-bucket-logging-json.log)                    │ PASS   │ 352.794458ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-bucket-replication-json.log)                │ PASS   │ 371.429833ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-bucket-versioning-json.log)                 │ PASS   │ 350.109291ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-object-json.log)                            │ PASS   │ 366.150917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-remove-user-from-group-json.log)                │ PASS   │ 354.213083ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-restore-db-instnace-from-s3-json.log)           │ PASS   │ 369.295583ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-restore-db-instnace-from-snapshot-json.log)     │ PASS   │ 363.330292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-run-instances-json.log)                         │ PASS   │ 3.727279375s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-schedule-key-deletion-json.log)                 │ PASS   │ 831.620833ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-command-all-json.log)                      │ PASS   │ 347.608542ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-command-targets-json.log)                  │ PASS   │ 389.111416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-serial-console-ssh-public-key-json.log)    │ PASS   │ 364.677167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-ssh-public-key-json.log)                   │ PASS   │ 378.176209ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-start-logging-json.log)                         │ PASS   │   384.8675ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-start-session-json.log)                         │ PASS   │ 363.951416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-configuration-recorder.log)                │ PASS   │ 398.100708ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-db-cluster-json.log)                       │ PASS   │ 3.989182792s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-db-instance-json.log)                      │ PASS   │ 348.732917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-logging-json.log)                          │ PASS   │ 351.107417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-subscribe-json.log)                             │ PASS   │  415.60475ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-terminate-instances-json.log)                   │ PASS   │  358.25425ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-terminate-session-json.log)                     │ PASS   │    374.408ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-tls-details-json.log)                           │ PASS   │ 408.322416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-access-key-json.log)                     │ PASS   │ 387.224416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-accout-password-policy-json.log)         │ PASS   │ 731.805292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-assume-role-policy-json.log)             │ PASS   │ 3.206269708s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-group-json.log)                          │ PASS   │ 390.506958ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-lambda-json.log)                         │ PASS   │ 378.945333ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-login-profile-json.log)                  │ PASS   │ 443.046083ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-ssh-public-key-json.log)                 │ PASS   │ 420.245791ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-trail-json.log)                          │ PASS   │ 399.037917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-user-json.log)                           │ PASS   │ 459.307625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-upload-ssh-public-key-json-flattened.log)       │ PASS   │ 373.412541ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-upload-ssh-public-key-json-keyword.log)         │ PASS   │ 416.288667ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-upload-ssh-public-key-json.log)                 │ PASS   │ 5.445503666s │
│ aws     │ cloudtrail  │ pipeline  │ test-add-permission-json.log                                                   │ PASS   │ 120.403125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-add-user-to-group-json.log                                                │ PASS   │  60.218708ms │
│ aws     │ cloudtrail  │ pipeline  │ test-assume-role-json.log                                                      │ PASS   │  89.885833ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-group-policy-json.log                                              │ PASS   │    70.5015ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-role-policy-json.log                                               │ PASS   │  68.748542ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-user-policy-json.log                                               │ PASS   │  74.842208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-user-role-json.log                                                 │ PASS   │  70.900042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-authorize-security-group-egress-json.log                                  │ PASS   │  78.852291ms │
│ aws     │ cloudtrail  │ pipeline  │ test-authorize-security-group-ingress-json.log                                 │ PASS   │  80.558042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-batch-get-secret-value-json.log                                           │ PASS   │    122.926ms │
│ aws     │ cloudtrail  │ pipeline  │ test-change-password-json.log                                                  │ PASS   │  65.635583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-cloudtrail-digest-json.log                                                │ PASS   │  54.946541ms │
│ aws     │ cloudtrail  │ pipeline  │ test-console-login-json.log                                                    │ PASS   │ 101.941083ms │
│ aws     │ cloudtrail  │ pipeline  │ test-converse-json.log                                                         │ PASS   │  66.833375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-copy-object-json-minimal.log                                              │ PASS   │  71.686125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-copy-object-json.log                                                      │ PASS   │    70.6415ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-access-key-json.log                                                │ PASS   │  58.815084ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-control-channel-json.log                                           │ PASS   │  69.055792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-db-instance-json.log                                               │ PASS   │  93.964916ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-detector-json.log                                                  │ PASS   │ 102.649292ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-document-json.log                                                  │ PASS   │  68.985541ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-group-json.log                                                     │ PASS   │  80.527125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-key-pair-json.log                                                  │ PASS   │  65.754334ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-lambda-json.log                                                    │ PASS   │  63.958833ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-policy-json.log                                                    │ PASS   │  68.935792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-stack-json.log                                                     │ PASS   │  68.138666ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-stack-set-json.log                                                 │ PASS   │      68.17ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-topic-json.log                                                     │ PASS   │  63.757958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-filter-response-json.log                            │ PASS   │ 169.327709ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-filter-rule-json.log                                │ PASS   │  67.620625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-session-request-json.log                            │ PASS   │  67.999375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-target-json.log                                     │ PASS   │  67.537958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-trail-json.log                                                     │ PASS   │      55.89ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-trust-anchor-json.log                                              │ PASS   │  68.846459ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-user-json.log                                                      │ PASS   │  58.520583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-virtual-mfa-device-json.log                                        │ PASS   │  54.458917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-deactivate-mfa-device-json.log                                            │ PASS   │  56.060958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-access-key-json.log                                                │ PASS   │  54.832792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-alarms-json.log                                                    │ PASS   │  68.583916ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-bucket-json.log                                                    │ PASS   │  66.743167ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-db-cluster-json.log                                                │ PASS   │  68.344125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-db-instance-json.log                                               │ PASS   │   68.48425ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-detector-json.log                                                  │ PASS   │  66.234458ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-file-system-json.log                                               │ PASS   │  69.010625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-flow-log-json.log                                                  │ PASS   │  69.961792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-global-cluster-json.log                                            │ PASS   │  64.278125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-group-json.log                                                     │ PASS   │  62.415291ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-log-group-json.log                                                 │ PASS   │ 136.016625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-log-stream-json.log                                                │ PASS   │  64.659958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-mount-target-json.log                                              │ PASS   │  67.458208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-network-acl-entry-json.log                                         │ PASS   │   69.13975ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-network-acl-json.log                                               │ PASS   │  69.847167ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-resolver-query-log-config-json.log                                 │ PASS   │  70.987375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-rule-group-json.log                                                │ PASS   │  63.015625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-rule-json.log                                                      │ PASS   │     67.493ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-ssh-public-key-json.log                                            │ PASS   │   55.30025ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-trail-json.log                                                     │ PASS   │  58.036625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-user-json.log                                                      │ PASS   │     93.804ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-virtual-mfa-device-json.log                                        │ PASS   │  51.962083ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-web-acl-json.log                                                   │ PASS   │  66.327625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-disable-key-json.log                                                      │ PASS   │  68.889209ms │
│ aws     │ cloudtrail  │ pipeline  │ test-enable-mfa-device-json.log                                                │ PASS   │   55.73025ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-bucket-policy-json.log                                                │ PASS   │  58.242416ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-caller-identity-json.log                                              │ PASS   │  65.942042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-parameter-json.log                                                    │ PASS   │  68.581917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-parameters-json.log                                                   │ PASS   │   66.18675ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-password-data-json.log                                                │ PASS   │  66.394333ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-policy-json.log                                                       │ PASS   │ 138.720792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-secret-value-json.log                                                 │ PASS   │   83.88725ms │
│ aws     │ cloudtrail  │ pipeline  │ test-insight-json.log                                                          │ PASS   │  44.907792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-list-attached-role-policies-json.log                                      │ PASS   │    62.2655ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-cluster-json.log                                                │ PASS   │  63.592583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-cluster-snapshot-attribute-json.log                             │ PASS   │  63.869833ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-instance-json.log                                               │ PASS   │  67.121625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-snapshot-attributte-json.log                                    │ PASS   │  64.040917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-image-attribute-json.log                                           │ PASS   │  64.225583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-snapshot-attribute-json.log                                        │ PASS   │    66.3195ms │
│ aws     │ cloudtrail  │ pipeline  │ test-open-control-channel-json.log                                             │ PASS   │  98.497417ms │
│ aws     │ cloudtrail  │ pipeline  │ test-publish-json.log                                                          │ PASS   │     64.121ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-bucket-logging-json.log                                               │ PASS   │  64.982375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-bucket-replication-json.log                                           │ PASS   │  64.130042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-bucket-versioning-json.log                                            │ PASS   │  65.035125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-object-json.log                                                       │ PASS   │  68.290042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-remove-user-from-group-json.log                                           │ PASS   │    54.2075ms │
│ aws     │ cloudtrail  │ pipeline  │ test-restore-db-instnace-from-s3-json.log                                      │ PASS   │    67.6785ms │
│ aws     │ cloudtrail  │ pipeline  │ test-restore-db-instnace-from-snapshot-json.log                                │ PASS   │  64.790417ms │
│ aws     │ cloudtrail  │ pipeline  │ test-run-instances-json.log                                                    │ PASS   │ 136.494292ms │
│ aws     │ cloudtrail  │ pipeline  │ test-schedule-key-deletion-json.log                                            │ PASS   │ 145.311375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-command-all-json.log                                                 │ PASS   │  54.419959ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-command-targets-json.log                                             │ PASS   │  66.115625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-serial-console-ssh-public-key-json.log                               │ PASS   │  66.854208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-ssh-public-key-json.log                                              │ PASS   │  65.316208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-start-logging-json.log                                                    │ PASS   │  55.720458ms │
│ aws     │ cloudtrail  │ pipeline  │ test-start-session-json.log                                                    │ PASS   │    63.3075ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-configuration-recorder.log                                           │ PASS   │  60.464917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-db-cluster-json.log                                                  │ PASS   │ 142.985917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-db-instance-json.log                                                 │ PASS   │  65.190166ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-logging-json.log                                                     │ PASS   │  50.613542ms │
│ aws     │ cloudtrail  │ pipeline  │ test-subscribe-json.log                                                        │ PASS   │  65.661167ms │
│ aws     │ cloudtrail  │ pipeline  │ test-terminate-instances-json.log                                              │ PASS   │  60.563333ms │
│ aws     │ cloudtrail  │ pipeline  │ test-terminate-session-json.log                                                │ PASS   │  67.512041ms │
│ aws     │ cloudtrail  │ pipeline  │ test-tls-details-json.log                                                      │ PASS   │  84.163583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-access-key-json.log                                                │ PASS   │  54.371667ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-accout-password-policy-json.log                                    │ PASS   │     53.979ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-assume-role-policy-json.log                                        │ PASS   │ 139.236792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-group-json.log                                                     │ PASS   │      80.48ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-lambda-json.log                                                    │ PASS   │  44.664334ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-login-profile-json.log                                             │ PASS   │  52.807209ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-ssh-public-key-json.log                                            │ PASS   │  63.633917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-trail-json.log                                                     │ PASS   │  71.297875ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-user-json.log                                                      │ PASS   │  59.413417ms │
│ aws     │ cloudtrail  │ pipeline  │ test-upload-ssh-public-key-json-flattened.log                                  │ PASS   │  53.496792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-upload-ssh-public-key-json-keyword.log                                    │ PASS   │   55.09575ms │
│ aws     │ cloudtrail  │ pipeline  │ test-upload-ssh-public-key-json.log                                            │ PASS   │  75.182584ms │
╰─────────┴─────────────┴───────────┴────────────────────────────────────────────────────────────────────────────────┴────────┴──────────────╯
--- Test results for package: aws - END   ---
Done

Related issues

@kcreddy kcreddy marked this pull request as ready for review January 27, 2026 08:38
@kcreddy kcreddy requested review from a team as code owners January 27, 2026 08:38
@kcreddy kcreddy self-assigned this Jan 27, 2026
@kcreddy kcreddy added Integration:aws AWS bugfix Pull request that fixes a bug issue backport Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Jan 27, 2026
@elasticmachine
Copy link

elasticmachine commented Jan 27, 2026

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@kcreddy kcreddy mentioned this pull request Jan 27, 2026
Merged
5 tasks
@elasticmachine
Copy link

elasticmachine commented Jan 27, 2026

💚 Build Succeeded

cc @kcreddy

@kcreddy kcreddy merged commit efa3658 into elastic:backport-aws-3.17 Jan 27, 2026
8 checks passed
@kcreddy kcreddy deleted the aws-cloudtrail-lambda-bp branch January 27, 2026 13:42
@elastic-vault-github-plugin-prod
Copy link

elastic-vault-github-plugin-prod bot commented Jan 27, 2026

Package aws - 3.17.2 containing this change is available at https://epr.elastic.co/package/aws/3.17.2/

kcreddy added a commit that referenced this pull request Jan 28, 2026
@kcreddy
update main changelog to reflect backported fixes (#17065)
9617069 
aws: Update main changelog to reflect 3.17 backported fixes.

Backport fixes:
3.17.1: #16998
3.17.2: #17064
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chemamartinez chemamartinez chemamartinez approved these changes

Assignees

@kcreddy kcreddy

Labels

backport bugfix Pull request that fixes a bug issue Integration:aws AWS Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@kcreddy @elasticmachine @chemamartinez