Find the AWS Regions, user names, and ARNs of newly created IAM users.
Cloudwatch Log Insights snippet that helps identify AWS Regions, user names and ARNS of newly created IAM users
filter eventName="CreateUser"
| fields awsRegion, requestParameters.userName, responseElements.user.arn
< Back to snippets
Learn more about Cloudwach Logs Insights.
Running the CloudWatch snippet
Click on the button below to open up the snippet directly into your AWS account.
Manually running the CloudWatch snippet
1. Open CloudWatch console
2. Select Logs, and then choose Logs Insights.
3. In the Select log group(s) drop down, choose one or more log groups to query.
4. Copy snippet into query text area.
5. Click "Run Query"
Additional resources
Created by:
