<ul>
<li>CLI</li>
</ul>
<pre><code class="lang-plaintext">aws cloudtrail lookup-events --lookup-attributes AttributeKey=&lt;attribute&gt;,AttributeValue=&lt;string&gt;
</code></pre>
<ul>
<li>attribute</li>
</ul>
<pre><code class="lang-plaintext">AccessKeyId
EventId
EventName
EventSource
ReadOnly
ResourceName
ResourceType
Username
</code></pre>
<ul>
<li>delete ECS service event (example)</li>
</ul>
<pre><code class="lang-plaintext">aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=DeleteService --query Events[].Resources[].ResourceName
</code></pre>
<ul>
<li>reference</li>
</ul>
<p><a target="_blank" href="https://docs.aws.amazon.com/ko_kr/awscloudtrail/latest/userguide/view-cloudtrail-events-cli.html">https://docs.aws.amazon.com/ko_kr/awscloudtrail/latest/userguide/view-cloudtrail-events-cli.html</a></p>


* CLI
    

```plaintext
aws cloudtrail lookup-events --lookup-attributes AttributeKey=<attribute>,AttributeValue=<string>
```

* attribute
    

```plaintext
AccessKeyId
EventId
EventName
EventSource
ReadOnly
ResourceName
ResourceType
Username
```

* delete ECS service event (example)
    

```plaintext
aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=DeleteService --query Events[].Resources[].ResourceName
```

* reference
    

[https://docs.aws.amazon.com/ko\_kr/awscloudtrail/latest/userguide/view-cloudtrail-events-cli.html](https://docs.aws.amazon.com/ko_kr/awscloudtrail/latest/userguide/view-cloudtrail-events-cli.html)

AWS CloudTrail CLI example(delete ECS service event)

AWS/AWS CloudTrail

Jesus, Love, Family, Happy Life, Linux, Cloud, SRE, DevOps Engineer, FinOps, System Engineer, Problem Solver
