aws-cloudwatch-logs-insights-query-results
Logs Insights results can return any parsed field from selected log events, including credentials and PII.
Where it sits
| location | logs:GetQueryResults.results[][].{field,value} |
|---|
| location kind | data_record |
|---|
| data kinds | credential password api_key access_key secret_key customer_data pii |
|---|
| emits edge | CanReadData |
|---|
| service | CloudWatch/Logs (aws:cloudwatch) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetQueryResults |
|---|
| response path | results[][].{field,value} |
|---|
| encoding | json |
|---|
| params | {"queryId": "\u003cquery-id\u003e"} |
|---|
Required permissions
logs:GetQueryResults
References