Skip to main content

Monitored Events

Regle tracks mutation events for a variety of AWS services. See the list below for the currently tracked event list.

If you have additional events you would like to see supported, please get in touch here.

{
  "Amazon S3": [
    "CreateBucket",
    "DeleteBucket",
    "PutObject",
    "DeleteObject",
    "RestoreObject",
    "CopyObject",
    "CompleteMultipartUpload",
    "CreateMultipartUpload",
    "DeleteObjectTagging",
    "PutObjectTagging"
  ],
  "IAM": [
    "CreateUser",
    "DeleteUser",
    "UpdateUser",
    "CreateGroup",
    "DeleteGroup",
    "UpdateGroup",
    "AttachUserPolicy",
    "DetachUserPolicy",
    "AttachGroupPolicy",
    "DetachGroupPolicy",
    "AttachRolePolicy",
    "DetachRolePolicy",
    "CreateRole",
    "DeleteRole",
    "UpdateRole"
  ],
  "Amazon EC2": [
    "RunInstances",
    "StartInstances",
    "StopInstances",
    "TerminateInstances",
    "CreateImage",
    "CreateSnapshot",
    "DeleteSnapshot",
    "ModifyInstanceAttribute",
    "ModifyVolume"
  ],
  "AWS Lambda": [
    "CreateFunction",
    "DeleteFunction",
    "UpdateFunctionCode",
    "UpdateFunctionConfiguration"
  ],
  "Amazon RDS": [
    "CreateDBInstance",
    "DeleteDBInstance",
    "CreateDBSnapshot",
    "DeleteDBSnapshot",
    "ModifyDBInstance"
  ],
  "Amazon SQS": [
    "CreateQueue",
    "DeleteQueue",
    "SendMessage",
    "ReceiveMessage",
    "DeleteMessage",
    "ChangeMessageVisibility"
  ],
  "Amazon CloudWatch": [
    "PutMetricData",
    "PutDashboard"
  ],
  "Amazon DynamoDB": [
    "CreateTable",
    "DeleteTable",
    "UpdateTable",
    "PutItem",
    "UpdateItem",
    "DeleteItem"
  ],
  "Amazon SNS": [
    "CreateTopic",
    "DeleteTopic",
    "Publish"
  ],
  "KMS": [
    "CreateKey",
    "ScheduleKeyDeletion",
    "CancelKeyDeletion"
  ],
  "Amazon Glacier": [
    "InitiateJob",
    "UploadArchive",
    "UploadMultipartPart"
  ],
  "Amazon CloudFront": [
    "CreateDistribution",
    "UpdateDistribution",
    "DeleteDistribution"
  ],
  "Amazon SimpleDB": [
    "CreateDomain",
    "DeleteDomain",
    "PutAttributes",
    "DeleteAttributes"
  ],
  "Amazon Redshift": [
    "CreateCluster",
    "DeleteCluster",
    "ModifyCluster"
  ],
  "Amazon EFS": [
    "CreateFileSystem",
    "DeleteFileSystem",
    "CreateMountTarget",
    "DeleteMountTarget"
  ],
  "Elastic Beanstalk": [
    "CreateApplication",
    "CreateEnvironment",
    "UpdateEnvironment",
    "TerminateEnvironment"
  ],
  "ECS": [
    "CreateCluster",
    "DeleteCluster",
    "RegisterTaskDefinition",
    "DeregisterTaskDefinition"
  ]
}