mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
bpatel
8 lines
543 B
YAML
8 lines
543 B
YAML
definition: (eventName=AuthorizeSecurityGroupIngress OR eventName=CreateSecurityGroup
|
|
OR eventName=DeleteSecurityGroup OR eventName=DescribeClusterSecurityGroups OR eventName=DescribeDBSecurityGroups
|
|
OR eventName=DescribeSecurityGroupReferences OR eventName=DescribeSecurityGroups
|
|
OR eventName=DescribeStaleSecurityGroups OR eventName=RevokeSecurityGroupIngress
|
|
OR eventName=UpdateSecurityGroupRuleDescriptionsIngress)
|
|
description: This macro is a list of AWS event names associated with security groups
|
|
name: security_group_api_calls
|