- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Cloud
- Security
Triggering a Lambda Function in Response to a CloudTrail Log Event
In this guided lab, you will build a simple event-driven automation workflow in AWS that responds to account activity recorded by CloudTrail. You will configure CloudTrail management event logging, create a Lambda function to process matching events, and use an EventBridge rule to invoke the function when a specific API action occurs. By the end of the lab, you will validate the full pipeline by generating a test account change and confirming that the Lambda function runs successfully.
Lab Info
Table of Contents
-
Challenge
Create a Lambda function that can process CloudTrail-based event data
- Create a Lambda function for the automation workflow.
- Configure the permissions required for the function to write execution output to CloudWatch Logs.
- Prepare the function to capture and log key details from the triggering event.
-
Challenge
Configure CloudTrail to capture relevant management events for downstream automation
- Review the available logging setup and identify the destination for trail delivery.
- Configure a trail to capture the management events required for the automation workflow.
- Confirm that logging is enabled and the trail is ready to support downstream event processing.
-
Challenge
Validate that the Lambda invocation pipeline executes when account changes are made
- Perform a test action that generates matching CloudTrail activity.
- Confirm that the EventBridge rule matches the event and invokes the Lambda function.
- Review the Lambda or CloudWatch log output to verify that the function received and processed the event data.
-
Challenge
Create an EventBridge rule that triggers the Lambda function for specified CloudTrail activity
- Define an event pattern that matches a specific CloudTrail-recorded API action.
- Configure the Lambda function as the target for the rule.
- Verify that the rule is enabled and that Lambda invocation permissions are in place.
About the author
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.