Articles → AWS → Create A Report Of Those Users Who Have Logged In To The AWS Console Today

Create A Report Of Those Users Who Have Logged In To The AWS Console Today

In this article, we will create a report of those users who have logged in to the AWS console today.

Steps

For creating the report, we will work on the following steps: -

Create a cloud trail
Create a table in Athena for CloudTrail
Create a query in Athena

So, let us get started.

Create A CloudTrail

First, create a CloudTrail. Use this link to create a cloud trail. Once the CloudTrail is created, an S3 bucket is also created.

Picture showing the S3 bucket created on the cloudtrail creation

Click to Enlarge

Create A Table In Athena For CloudTrail

Once the CloudTrail is created, go to the Event History section. Click on the Create Athena table button.

Picture showing the Create Athena table button for creating a new table in Athena

Click to Enlarge

A popup window will appear.

Picture showing the Create table query of the Athena table to be created

Click to Enlarge

Click on the Create table button. The table gets created.

Create A Query In Athena

Before we query Athena, set the query result location to the CloudTrail S3 bucket. You can follow this article for setting up the query location.

Picture showing changing the location of query result to the cloudtrail S3 bucket

Click to Enlarge

Now, go to the query editor and execute this query.

select from_iso8601_date(substr(eventtime,1,10)), *
from cloudtrail_logs_aws_cloudtrail_logs_462618770999_54460e6c
where 
date_diff('Day',from_iso8601_date(substr(eventtime,1,10)),CURRENT_DATE) = 0
and 
eventname = 'ConsoleLogin'

Once the query is executed, you will get results.

Picture showing the report of those users who have logged in to the AWS console today

Click to Enlarge

Posted By -	Karan Gupta

Posted On -	Thursday, November 25, 2021

Query/Feedback

Your Email Id

Subject

Query/Feedback	Characters remaining 250