mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
David Dorsey
11 lines
700 B
YAML
11 lines
700 B
YAML
definition: (eventName=AssociateAddress OR eventName=AssociateIamInstanceProfile OR
|
|
eventName=AttachClassicLinkVpc OR eventName=AttachNetworkInterface OR eventName=AttachVolume
|
|
OR eventName=BundleInstance OR eventName=DetachClassicLinkVpc OR eventName=DetachVolume
|
|
OR eventName=ModifyInstanceAttribute OR eventName=ModifyInstancePlacement
|
|
OR eventName=MonitorInstances OR eventName=RebootInstances
|
|
OR eventName=ResetInstanceAttribute OR eventName=StartInstances OR eventName=StopInstances
|
|
OR eventName=TerminateInstances OR eventName=UnmonitorInstances)
|
|
description: This is a list of AWS event names that have to do with modifying Amazon
|
|
EC2 instances
|
|
name: ec2_modification_api_calls
|