Skip to content

aws.cloudtrail: Fix lambda events parsing of vpcConfig.securityGroupIds and vpcConfig.subnetIds fields#17064

Merged
kcreddy merged 2 commits intoelastic:backport-aws-3.17from
kcreddy:aws-cloudtrail-lambda-bp
Jan 27, 2026
Merged

aws.cloudtrail: Fix lambda events parsing of vpcConfig.securityGroupIds and vpcConfig.subnetIds fields#17064
kcreddy merged 2 commits intoelastic:backport-aws-3.17from
kcreddy:aws-cloudtrail-lambda-bp

Conversation

@kcreddy
Copy link
Contributor

@kcreddy kcreddy commented Jan 27, 2026

Proposed commit message

Backport of #16991

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

Pipeline tests successful on new sample log.

--- Test results for package: aws - START ---
╭─────────┬─────────────┬───────────┬────────────────────────────────────────────────────────────────────────────────┬────────┬──────────────╮
│ PACKAGE │ DATA STREAM │ TEST TYPE │ TEST NAME                                                                      │ RESULT │ TIME ELAPSED │
├─────────┼─────────────┼───────────┼────────────────────────────────────────────────────────────────────────────────┼────────┼──────────────┤
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-add-permission-json.log)                        │ PASS   │ 401.744375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-add-user-to-group-json.log)                     │ PASS   │ 382.040959ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-assume-role-json.log)                           │ PASS   │ 380.172542ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-group-policy-json.log)                   │ PASS   │ 371.195458ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-role-policy-json.log)                    │ PASS   │ 374.827875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-user-policy-json.log)                    │ PASS   │ 404.745834ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-attach-user-role-json.log)                      │ PASS   │ 369.755208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-authorize-security-group-egress-json.log)       │ PASS   │   397.6515ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-authorize-security-group-ingress-json.log)      │ PASS   │ 3.401735916s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-batch-get-secret-value-json.log)                │ PASS   │ 911.518417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-change-password-json.log)                       │ PASS   │ 356.423125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-cloudtrail-digest-json.log)                     │ PASS   │ 407.972666ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-console-login-json.log)                         │ PASS   │ 361.144375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-converse-json.log)                              │ PASS   │ 357.271125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-copy-object-json-minimal.log)                   │ PASS   │ 376.972291ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-copy-object-json.log)                           │ PASS   │ 358.826458ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-access-key-json.log)                     │ PASS   │   364.9275ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-control-channel-json.log)                │ PASS   │ 377.535167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-db-instance-json.log)                    │ PASS   │ 3.175408375s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-detector-json.log)                       │ PASS   │     1.39412s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-document-json.log)                       │ PASS   │ 353.505208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-group-json.log)                          │ PASS   │ 377.642917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-key-pair-json.log)                       │ PASS   │ 369.270084ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-lambda-json.log)                         │ PASS   │ 370.352167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-policy-json.log)                         │ PASS   │ 369.944292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-stack-json.log)                          │ PASS   │    368.928ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-stack-set-json.log)                      │ PASS   │ 371.565209ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-topic-json.log)                          │ PASS   │ 513.298541ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-filter-response-json.log) │ PASS   │ 3.389744208s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-filter-rule-json.log)     │ PASS   │ 368.447833ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-session-request-json.log) │ PASS   │ 407.653792ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-traffic-mirror-target-json.log)          │ PASS   │  393.16075ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-trail-json.log)                          │ PASS   │ 398.041417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-trust-anchor-json.log)                   │ PASS   │ 409.310625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-user-json.log)                           │ PASS   │  402.77325ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-create-virtual-mfa-device-json.log)             │ PASS   │  376.22725ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-deactivate-mfa-device-json.log)                 │ PASS   │ 512.193583ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-access-key-json.log)                     │ PASS   │ 371.258959ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-alarms-json.log)                         │ PASS   │ 371.317334ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-bucket-json.log)                         │ PASS   │ 400.863416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-db-cluster-json.log)                     │ PASS   │ 409.412625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-db-instance-json.log)                    │ PASS   │ 388.184875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-detector-json.log)                       │ PASS   │   402.1485ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-file-system-json.log)                    │ PASS   │ 384.787541ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-flow-log-json.log)                       │ PASS   │ 441.049875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-global-cluster-json.log)                 │ PASS   │   365.0425ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-group-json.log)                          │ PASS   │ 867.318542ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-log-group-json.log)                      │ PASS   │ 2.660507125s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-log-stream-json.log)                     │ PASS   │ 350.714792ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-mount-target-json.log)                   │ PASS   │ 374.629208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-network-acl-entry-json.log)              │ PASS   │ 355.854417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-network-acl-json.log)                    │ PASS   │ 378.919167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-resolver-query-log-config-json.log)      │ PASS   │ 389.784083ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-rule-group-json.log)                     │ PASS   │ 390.666333ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-rule-json.log)                           │ PASS   │ 374.868209ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-ssh-public-key-json.log)                 │ PASS   │ 355.727125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-trail-json.log)                          │ PASS   │ 415.999459ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-user-json.log)                           │ PASS   │ 3.648867625s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-virtual-mfa-device-json.log)             │ PASS   │ 350.698208ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-delete-web-acl-json.log)                        │ PASS   │ 397.240792ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-disable-key-json.log)                           │ PASS   │ 353.037958ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-enable-mfa-device-json.log)                     │ PASS   │  373.34075ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-bucket-policy-json.log)                     │ PASS   │ 397.776958ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-caller-identity-json.log)                   │ PASS   │ 402.643667ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-parameter-json.log)                         │ PASS   │ 398.739875ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-parameters-json.log)                        │ PASS   │ 368.241333ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-password-data-json.log)                     │ PASS   │ 665.414625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-policy-json.log)                            │ PASS   │ 3.063852292s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-get-secret-value-json.log)                      │ PASS   │ 368.401375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-insight-json.log)                               │ PASS   │ 349.775125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-list-attached-role-policies-json.log)           │ PASS   │ 380.085375ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-cluster-json.log)                     │ PASS   │   349.2575ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-cluster-snapshot-attribute-json.log)  │ PASS   │   364.7385ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-instance-json.log)                    │ PASS   │ 364.650834ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-db-snapshot-attributte-json.log)         │ PASS   │   369.0915ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-image-attribute-json.log)                │ PASS   │ 380.444292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-modify-snapshot-attribute-json.log)             │ PASS   │ 3.662820875s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-open-control-channel-json.log)                  │ PASS   │ 705.851125ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-publish-json.log)                               │ PASS   │ 346.853583ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-bucket-logging-json.log)                    │ PASS   │ 352.794458ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-bucket-replication-json.log)                │ PASS   │ 371.429833ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-bucket-versioning-json.log)                 │ PASS   │ 350.109291ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-put-object-json.log)                            │ PASS   │ 366.150917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-remove-user-from-group-json.log)                │ PASS   │ 354.213083ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-restore-db-instnace-from-s3-json.log)           │ PASS   │ 369.295583ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-restore-db-instnace-from-snapshot-json.log)     │ PASS   │ 363.330292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-run-instances-json.log)                         │ PASS   │ 3.727279375s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-schedule-key-deletion-json.log)                 │ PASS   │ 831.620833ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-command-all-json.log)                      │ PASS   │ 347.608542ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-command-targets-json.log)                  │ PASS   │ 389.111416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-serial-console-ssh-public-key-json.log)    │ PASS   │ 364.677167ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-send-ssh-public-key-json.log)                   │ PASS   │ 378.176209ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-start-logging-json.log)                         │ PASS   │   384.8675ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-start-session-json.log)                         │ PASS   │ 363.951416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-configuration-recorder.log)                │ PASS   │ 398.100708ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-db-cluster-json.log)                       │ PASS   │ 3.989182792s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-db-instance-json.log)                      │ PASS   │ 348.732917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-stop-logging-json.log)                          │ PASS   │ 351.107417ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-subscribe-json.log)                             │ PASS   │  415.60475ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-terminate-instances-json.log)                   │ PASS   │  358.25425ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-terminate-session-json.log)                     │ PASS   │    374.408ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-tls-details-json.log)                           │ PASS   │ 408.322416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-access-key-json.log)                     │ PASS   │ 387.224416ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-accout-password-policy-json.log)         │ PASS   │ 731.805292ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-assume-role-policy-json.log)             │ PASS   │ 3.206269708s │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-group-json.log)                          │ PASS   │ 390.506958ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-lambda-json.log)                         │ PASS   │ 378.945333ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-login-profile-json.log)                  │ PASS   │ 443.046083ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-ssh-public-key-json.log)                 │ PASS   │ 420.245791ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-trail-json.log)                          │ PASS   │ 399.037917ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-update-user-json.log)                           │ PASS   │ 459.307625ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-upload-ssh-public-key-json-flattened.log)       │ PASS   │ 373.412541ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-upload-ssh-public-key-json-keyword.log)         │ PASS   │ 416.288667ms │
│ aws     │ cloudtrail  │ pipeline  │ (ingest pipeline warnings test-upload-ssh-public-key-json.log)                 │ PASS   │ 5.445503666s │
│ aws     │ cloudtrail  │ pipeline  │ test-add-permission-json.log                                                   │ PASS   │ 120.403125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-add-user-to-group-json.log                                                │ PASS   │  60.218708ms │
│ aws     │ cloudtrail  │ pipeline  │ test-assume-role-json.log                                                      │ PASS   │  89.885833ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-group-policy-json.log                                              │ PASS   │    70.5015ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-role-policy-json.log                                               │ PASS   │  68.748542ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-user-policy-json.log                                               │ PASS   │  74.842208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-attach-user-role-json.log                                                 │ PASS   │  70.900042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-authorize-security-group-egress-json.log                                  │ PASS   │  78.852291ms │
│ aws     │ cloudtrail  │ pipeline  │ test-authorize-security-group-ingress-json.log                                 │ PASS   │  80.558042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-batch-get-secret-value-json.log                                           │ PASS   │    122.926ms │
│ aws     │ cloudtrail  │ pipeline  │ test-change-password-json.log                                                  │ PASS   │  65.635583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-cloudtrail-digest-json.log                                                │ PASS   │  54.946541ms │
│ aws     │ cloudtrail  │ pipeline  │ test-console-login-json.log                                                    │ PASS   │ 101.941083ms │
│ aws     │ cloudtrail  │ pipeline  │ test-converse-json.log                                                         │ PASS   │  66.833375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-copy-object-json-minimal.log                                              │ PASS   │  71.686125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-copy-object-json.log                                                      │ PASS   │    70.6415ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-access-key-json.log                                                │ PASS   │  58.815084ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-control-channel-json.log                                           │ PASS   │  69.055792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-db-instance-json.log                                               │ PASS   │  93.964916ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-detector-json.log                                                  │ PASS   │ 102.649292ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-document-json.log                                                  │ PASS   │  68.985541ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-group-json.log                                                     │ PASS   │  80.527125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-key-pair-json.log                                                  │ PASS   │  65.754334ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-lambda-json.log                                                    │ PASS   │  63.958833ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-policy-json.log                                                    │ PASS   │  68.935792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-stack-json.log                                                     │ PASS   │  68.138666ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-stack-set-json.log                                                 │ PASS   │      68.17ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-topic-json.log                                                     │ PASS   │  63.757958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-filter-response-json.log                            │ PASS   │ 169.327709ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-filter-rule-json.log                                │ PASS   │  67.620625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-session-request-json.log                            │ PASS   │  67.999375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-traffic-mirror-target-json.log                                     │ PASS   │  67.537958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-trail-json.log                                                     │ PASS   │      55.89ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-trust-anchor-json.log                                              │ PASS   │  68.846459ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-user-json.log                                                      │ PASS   │  58.520583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-create-virtual-mfa-device-json.log                                        │ PASS   │  54.458917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-deactivate-mfa-device-json.log                                            │ PASS   │  56.060958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-access-key-json.log                                                │ PASS   │  54.832792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-alarms-json.log                                                    │ PASS   │  68.583916ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-bucket-json.log                                                    │ PASS   │  66.743167ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-db-cluster-json.log                                                │ PASS   │  68.344125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-db-instance-json.log                                               │ PASS   │   68.48425ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-detector-json.log                                                  │ PASS   │  66.234458ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-file-system-json.log                                               │ PASS   │  69.010625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-flow-log-json.log                                                  │ PASS   │  69.961792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-global-cluster-json.log                                            │ PASS   │  64.278125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-group-json.log                                                     │ PASS   │  62.415291ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-log-group-json.log                                                 │ PASS   │ 136.016625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-log-stream-json.log                                                │ PASS   │  64.659958ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-mount-target-json.log                                              │ PASS   │  67.458208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-network-acl-entry-json.log                                         │ PASS   │   69.13975ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-network-acl-json.log                                               │ PASS   │  69.847167ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-resolver-query-log-config-json.log                                 │ PASS   │  70.987375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-rule-group-json.log                                                │ PASS   │  63.015625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-rule-json.log                                                      │ PASS   │     67.493ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-ssh-public-key-json.log                                            │ PASS   │   55.30025ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-trail-json.log                                                     │ PASS   │  58.036625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-user-json.log                                                      │ PASS   │     93.804ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-virtual-mfa-device-json.log                                        │ PASS   │  51.962083ms │
│ aws     │ cloudtrail  │ pipeline  │ test-delete-web-acl-json.log                                                   │ PASS   │  66.327625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-disable-key-json.log                                                      │ PASS   │  68.889209ms │
│ aws     │ cloudtrail  │ pipeline  │ test-enable-mfa-device-json.log                                                │ PASS   │   55.73025ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-bucket-policy-json.log                                                │ PASS   │  58.242416ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-caller-identity-json.log                                              │ PASS   │  65.942042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-parameter-json.log                                                    │ PASS   │  68.581917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-parameters-json.log                                                   │ PASS   │   66.18675ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-password-data-json.log                                                │ PASS   │  66.394333ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-policy-json.log                                                       │ PASS   │ 138.720792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-get-secret-value-json.log                                                 │ PASS   │   83.88725ms │
│ aws     │ cloudtrail  │ pipeline  │ test-insight-json.log                                                          │ PASS   │  44.907792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-list-attached-role-policies-json.log                                      │ PASS   │    62.2655ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-cluster-json.log                                                │ PASS   │  63.592583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-cluster-snapshot-attribute-json.log                             │ PASS   │  63.869833ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-instance-json.log                                               │ PASS   │  67.121625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-db-snapshot-attributte-json.log                                    │ PASS   │  64.040917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-image-attribute-json.log                                           │ PASS   │  64.225583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-modify-snapshot-attribute-json.log                                        │ PASS   │    66.3195ms │
│ aws     │ cloudtrail  │ pipeline  │ test-open-control-channel-json.log                                             │ PASS   │  98.497417ms │
│ aws     │ cloudtrail  │ pipeline  │ test-publish-json.log                                                          │ PASS   │     64.121ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-bucket-logging-json.log                                               │ PASS   │  64.982375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-bucket-replication-json.log                                           │ PASS   │  64.130042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-bucket-versioning-json.log                                            │ PASS   │  65.035125ms │
│ aws     │ cloudtrail  │ pipeline  │ test-put-object-json.log                                                       │ PASS   │  68.290042ms │
│ aws     │ cloudtrail  │ pipeline  │ test-remove-user-from-group-json.log                                           │ PASS   │    54.2075ms │
│ aws     │ cloudtrail  │ pipeline  │ test-restore-db-instnace-from-s3-json.log                                      │ PASS   │    67.6785ms │
│ aws     │ cloudtrail  │ pipeline  │ test-restore-db-instnace-from-snapshot-json.log                                │ PASS   │  64.790417ms │
│ aws     │ cloudtrail  │ pipeline  │ test-run-instances-json.log                                                    │ PASS   │ 136.494292ms │
│ aws     │ cloudtrail  │ pipeline  │ test-schedule-key-deletion-json.log                                            │ PASS   │ 145.311375ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-command-all-json.log                                                 │ PASS   │  54.419959ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-command-targets-json.log                                             │ PASS   │  66.115625ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-serial-console-ssh-public-key-json.log                               │ PASS   │  66.854208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-send-ssh-public-key-json.log                                              │ PASS   │  65.316208ms │
│ aws     │ cloudtrail  │ pipeline  │ test-start-logging-json.log                                                    │ PASS   │  55.720458ms │
│ aws     │ cloudtrail  │ pipeline  │ test-start-session-json.log                                                    │ PASS   │    63.3075ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-configuration-recorder.log                                           │ PASS   │  60.464917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-db-cluster-json.log                                                  │ PASS   │ 142.985917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-db-instance-json.log                                                 │ PASS   │  65.190166ms │
│ aws     │ cloudtrail  │ pipeline  │ test-stop-logging-json.log                                                     │ PASS   │  50.613542ms │
│ aws     │ cloudtrail  │ pipeline  │ test-subscribe-json.log                                                        │ PASS   │  65.661167ms │
│ aws     │ cloudtrail  │ pipeline  │ test-terminate-instances-json.log                                              │ PASS   │  60.563333ms │
│ aws     │ cloudtrail  │ pipeline  │ test-terminate-session-json.log                                                │ PASS   │  67.512041ms │
│ aws     │ cloudtrail  │ pipeline  │ test-tls-details-json.log                                                      │ PASS   │  84.163583ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-access-key-json.log                                                │ PASS   │  54.371667ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-accout-password-policy-json.log                                    │ PASS   │     53.979ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-assume-role-policy-json.log                                        │ PASS   │ 139.236792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-group-json.log                                                     │ PASS   │      80.48ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-lambda-json.log                                                    │ PASS   │  44.664334ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-login-profile-json.log                                             │ PASS   │  52.807209ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-ssh-public-key-json.log                                            │ PASS   │  63.633917ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-trail-json.log                                                     │ PASS   │  71.297875ms │
│ aws     │ cloudtrail  │ pipeline  │ test-update-user-json.log                                                      │ PASS   │  59.413417ms │
│ aws     │ cloudtrail  │ pipeline  │ test-upload-ssh-public-key-json-flattened.log                                  │ PASS   │  53.496792ms │
│ aws     │ cloudtrail  │ pipeline  │ test-upload-ssh-public-key-json-keyword.log                                    │ PASS   │   55.09575ms │
│ aws     │ cloudtrail  │ pipeline  │ test-upload-ssh-public-key-json.log                                            │ PASS   │  75.182584ms │
╰─────────┴─────────────┴───────────┴────────────────────────────────────────────────────────────────────────────────┴────────┴──────────────╯
--- Test results for package: aws - END   ---
Done

Related issues

@kcreddy kcreddy marked this pull request as ready for review January 27, 2026 08:38
@kcreddy kcreddy requested review from a team as code owners January 27, 2026 08:38
@kcreddy kcreddy self-assigned this Jan 27, 2026
@kcreddy kcreddy added Integration:aws AWS bugfix Pull request that fixes a bug issue backport Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Jan 27, 2026
@elasticmachine
Copy link

elasticmachine commented Jan 27, 2026

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@kcreddy kcreddy mentioned this pull request Jan 27, 2026
Merged
5 tasks
@elasticmachine
Copy link

elasticmachine commented Jan 27, 2026

💚 Build Succeeded

cc @kcreddy

@kcreddy kcreddy merged commit efa3658 into elastic:backport-aws-3.17 Jan 27, 2026
8 checks passed
@kcreddy kcreddy deleted the aws-cloudtrail-lambda-bp branch January 27, 2026 13:42
@elastic-vault-github-plugin-prod
Copy link

elastic-vault-github-plugin-prod bot commented Jan 27, 2026

Package aws - 3.17.2 containing this change is available at https://epr.elastic.co/package/aws/3.17.2/

kcreddy added a commit that referenced this pull request Jan 28, 2026
@kcreddy
update main changelog to reflect backported fixes (#17065)
9617069 
aws: Update main changelog to reflect 3.17 backported fixes.

Backport fixes:
3.17.1: #16998
3.17.2: #17064
jakubgalecki0 pushed a commit to jakubgalecki0/integrations that referenced this pull request Feb 19, 2026
@kcreddy @jakubgalecki0
update main changelog to reflect backported fixes (elastic#17065)
f8f56c5 
aws: Update main changelog to reflect 3.17 backported fixes.

Backport fixes:
3.17.1: elastic#16998
3.17.2: elastic#17064
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chemamartinez chemamartinez chemamartinez approved these changes

Assignees

@kcreddy kcreddy

Labels

backport bugfix Pull request that fixes a bug issue Integration:aws AWS Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@kcreddy @elasticmachine @chemamartinez