honeycombio / honeyaws

Observability for your AWS load balancers, CloudFront, and more
Apache License 2.0
52 stars 25 forks source link

Honeycloudtrail support Organization and multiregion Cloudtrails #194

Open jpepin opened 2 years ago

jpepin commented 2 years ago

Is your feature request related to a problem? Please describe. Honeycloudtrail assumes that all cloudtrails exist in the same region as the session that it's using, which is the default right now. It also does not support the s3 path formatting needed for Organization trails, which have an organization ID in the path as well as multiple account ids and regions.

Describe the solution you'd like Enable ingesting Organization cloudtrails and trails in regions other than the one the process is running in.

Describe alternatives you've considered You could run an ingester in every region to ingest multiregion cloudtrails, but there is no workaround for Organization trails.

Additional context

martin308 commented 2 years ago

Also see https://github.com/honeycombio/honeyaws/issues/118