search

OTRF / OSSEM

Open Source Security Events Metadata (OSSEM)
MIT License
1.22k stars 212 forks source link

Datadictionary for AWS Cloud Data sources #75

Closed ashwin-patil closed 4 years ago

ashwin-patil commented 4 years ago

Changelog :

This PR includes data dictionaries for 6 cloud datasets for Amazon Web Services(AWS) both in markdown and yaml formats. Markdown Location : project_root\data_dictionaries\aws ,
Yaml location: project_root\source\data_dictionaries\aws

CloudTrail is major data source to log API calls and supports integration with nearly every AWS service (160 services as of Apr-20) with exception of few unsupported services. For this release, the cloudtrail schema refers to the generic and applicable for every AWS services. There are few fields requestParameters, responseElements, additionalData which have different schema based on each API request, response. In future release, we will expand it to have per event schema.

Cyb3rWard0g commented 4 years ago

That's awesome man! This is a great start for the AWS datasets documentation :)