get_resource_history
Retrieve the complete CloudTrail audit trail for any AWS resource to see who created, modified, or deleted it. Ideal for security investigations and compliance checks.
Instructions
Get the full CloudTrail audit trail for a specific AWS resource. Shows who created, modified, and deleted it. Requires cloudtrail:LookupEvents IAM permission.
Args: resource_id: AWS resource ID or ARN timeframe_days: How many days back to search (1-90) limit: Maximum events to return (1-50)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| resource_id | Yes | ||
| timeframe_days | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |