Update example for AdvancedEventSelector

- Added set CloudTrail management logs
aws-ss · Jun 24, 2023 · b9102f6 · b9102f6
1 parent 7d0b096
commit b9102f6
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 18 deletions.
diff --git a/examples/AdvancedEventSelector/main.tf b/examples/AdvancedEventSelector/main.tf
@@ -8,42 +8,36 @@ module "cloudtrail" {
   source = "../..//"
 
   name           = "CloudTrail01"
-  s3_bucket_name = "cloudtrail-logs-123456789012"
+  s3_bucket_name = "aws-cloudtrail-logs-362252864672-5f4dec40"
   enable_logging = true
   insight_selector = {
     ApiCallRateInsight : true
     ApiErrorRateInsight : true
   }
   advanced_event_selector = [
     {
-      name = "Advanced Event Selector 01"
-
+      name = "Advanced Event Selector"
       field_selector = [
         {
-          field  = "resources.type"
-          equals = ["AWS::GuardDuty::Detector"]
+          field  = "eventCategory"
+          equals = ["Management"]
         },
         {
-          field  = "eventCategory"
-          equals = ["Data"]
+          field      = "eventSource"
+          not_equals = ["kms.amazonaws.com", "rdsdata.amazonaws.com"]
         }
       ]
     },
     {
-      name = "Advanced Event Selector 02"
-
+      name = "Advanced Event Selector"
       field_selector = [
-        {
-          field  = "resources.type"
-          equals = ["AWS::S3::Object"]
-        },
-        {
-          field  = "readOnly"
-          equals = ["true"]
-        },
         {
           field  = "eventCategory"
           equals = ["Data"]
+        },
+        {
+          field  = "resources.type"
+          equals = ["AWS::S3::Object"]
         }
       ]
     },

diff --git a/examples/AdvancedEventSelector/versions.tf b/examples/AdvancedEventSelector/versions.tf
@@ -4,7 +4,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 4.51.0"
+      version = ">= 5.4.0"
     }
   }
 }