amazon-web-servicesamazon-dynamodbamazon-cloudtrail

How can I choose a single dynamodb table as event type in Cloudtrail


I plan to create a trail in Cloudtrail to capture all data events for a dynamodb table. But it doesn't allow me to select a single dynamodb table. It is greyed out in below screenshot. Is there a way to only capture one single table rather than all tables?

enter image description here


Solution

  • You have to switch to advanced mode. Then you can specify custom event pattern in json, e.g.:

    [
      {
        "name": "",
        "fieldSelectors": [
          {
            "field": "eventCategory",
            "equals": [
              "Data"
            ]
          },
          {
            "field": "resources.type",
            "equals": [
              "AWS::DynamoDB::Table"
            ]
          },
          {
            "field": "resources.ARN",
            "equals": [
              "<ARN-OF-TABLE>"
            ]
          }
        ]
      }
    ]