Skip to content

aws: retain CloudTrail sessionCredentialFromConsole field #16098

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

aws: retain CloudTrail sessionCredentialFromConsole field #16098

wants to merge 1 commit into from
+17 −1

Conversation

@efd6
Copy link
Contributor

@efd6 efd6 commented Nov 24, 2025 •
edited
Loading

Proposed commit message

See title.

Note

The cases that we have all have values of either "true", or absent. It looks like it is always a boolean, but this is not documented to be the case, so it is left as a keyword to prevent loss of information.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@efd6 efd6 self-assigned this Nov 24, 2025
@efd6 efd6 added enhancement New feature or request Integration:aws AWS Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Nov 24, 2025
@efd6 efd6 requested a review from imays11 November 24, 2025 22:39
@elasticmachine
Copy link

elasticmachine commented Nov 25, 2025

💚 Build Succeeded

cc @efd6

@efd6 efd6 marked this pull request as ready for review November 25, 2025 00:52
@efd6 efd6 requested review from a team as code owners November 25, 2025 00:52
@elasticmachine
Copy link

elasticmachine commented Nov 25, 2025

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Nov 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@imays11 imays11 imays11 approved these changes

@giorgi-imerlishvili-elastic giorgi-imerlishvili-elastic giorgi-imerlishvili-elastic approved these changes

At least 1 approving review is required to merge this pull request.

Assignees

@efd6 efd6

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:aws AWS Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[AWS]: Add sessionCredentialFromConsole Boolean Field from CloudTrail Logs

5 participants

@efd6 @elasticmachine @imays11 @giorgi-imerlishvili-elastic @andrewkroh