Daniel Grzelak dagrz

dagrz / List cloudtrails

Created May 30, 2016 10:45

aws cloudtrail describe-trails

dagrz / Delete cloudtrail

Created May 30, 2016 10:50

aws cloudtrail delete-trail --name my-trail

dagrz / Disable cloudtrail logging

Created May 30, 2016 10:53

aws cloudtrail stop-logging --name my-trail

dagrz / Update cloudtrail bucket

Created May 30, 2016 11:05

aws cloudtrail update-trail --name my-trail --s3-bucket-name not-my-bucket

dagrz / Update cloudtrail single region

Created May 30, 2016 11:15

aws cloudtrail update-trail --name my-trail --no-is-multi-region-trail --no-include-global-service-events

dagrz / Cloudtrail KMS policy

Last active May 31, 2016 13:13

	{
	"Version": "2012-10-17",
	"Id": "Key policy created for CloudTrail",
	"Statement": [
	{
	"Sid": "Enable IAM User Permissions",
	"Effect": "Allow",
	"Principal": {
	"AWS": "[account-id]/[user-id]"
	},

dagrz / Cloudtrail s3 bucket policy

Created June 1, 2016 11:33

	{
	"Version":"2012-10-17",
	"Statement":[
	{
	"Sid":"AWSCloudTrailAclCheck20150319",
	"Effect":"Allow",
	"Principal":{
	"Service":"cloudtrail.amazonaws.com"
	},
	"Action":"s3:GetBucketAcl",

dagrz / Cloudtrail s3 bucket acl

Created June 1, 2016 12:46

dagrz / Lambda s3 delete function

Created June 2, 2016 13:46

-import json
-import urllib
-import boto3
-s3 = boto3.client('s3')
-def lambda_handler(event, context):
-    bucket = event['Records'][0]['s3']['bucket']['name']
-    key = urllib.unquote_plus(event['Records'][0]['s3']['object']['key']).decode('utf8')
-    try:

dagrz / S3 bucket put notification configuration

Last active June 5, 2016 04:37

	{
	"LambdaFunctionConfigurations": [
	{
	"LambdaFunctionArn": "arn:aws:lambda:[my-region]:[account-id]:function:[my-function]",
	"Id": "[my-guid]",
	"Events": [
	"s3:ObjectCreated:*"
	]
	}
	]