AWS CloudTrail Lake announces enhanced event filtering

The article summarizes the announcement of enhanced event filtering capabilities in AWS CloudTrail Lake, which is a managed data lake service for capturing, storing, and analyzing activity logs and AWS Config configuration items.

Specifically, the article covers:

• New attributes for filtering management and data events: eventSource, eventType, userIdentity.arn, and sessionCredentialFromConsole
• Additional filtering by eventName attribute for management events
• Ability to include or exclude specific values for these attributes
• Use case of excluding events from a dedicated monitoring IAM role to reduce ingested event volume and costs
• Availability of enhanced filtering in all AWS regions with CloudTrail Lake at no additional charge