Simplify AWS CloudTrail log evaluation with pure language question era in CloudTrail Lake (preview)

With great excitement, I am thrilled to introduce our generative synthetic intelligence (generative AI) powered pure language question era in , a centralized platform that seamlessly captures, stores, accesses, and analyzes exercise logs to ensure compliance, safety, and operational efficiency. Without requiring technical expertise in crafting a SQL query or deciphering the structure of activity events, you can pose questions about these exercise logs (administration and information occurrences) stored in CloudTrail Lake using natural language.

For instance, you may ask, “What number of database situations are deleted without a snapshot?” and the feature converts that query into a CloudTrail Lake query, allowing you to run it as-is or modify it to retrieve the desired event data. The advent of pure language queries simplifies the process of analyzing and exploring AWS exercise logs, making it more straightforward.

Now, let me introduce you to learning how to start using Pure Language Question Era.

A cloud-based language processing tool uses generative artificial intelligence to create pre-formatted SQL queries from user input, allowing for seamless integration with CloudTrail Lake’s question editor and enabling immediate query execution.

What is your request? Can a question generator solely generate queries for obtaining occurrence information from stores that collect CloudTrail administrative and event occurrences? I select an Occasion Information Retailer for my CloudTrail lake occasion data from the dropdown list. Within the realm of psychology, I employ precise language to navigate the intricacies of human thought and behavior.

The exact number of errors logged throughout the previous month was 457.

Then, I select . The new database query is algorithmically produced:

SELECT COUNT(*) AS error_count
FROM 8a6***
WHERE eventtime >= '2024-04-21 00:00:00'
    AND eventtime <= '2024-05-21 23:59:59'
    AND (
        errorcode IS NOT NULL
        OR errormessage IS NOT NULL
    )

You select to seize the opportunities.

What specific details would you like to know? The findings are quite fascinating. Which suppliers exhibited the most mistakes, and what triggers did these activities encounter that led to their failure? I’d appreciate any additional information you could provide regarding this matter.

Throughout the preceding month, a total of 457 errors were recorded across all services.

The new attempt starts here: I’ll take it.

SELECT eventsource,
    errorcode,
    errormessage,
    COUNT(*) AS errorCount
FROM 8a6***
WHERE eventtime >= '2024-04-21 00:00:00'
    AND eventtime <= '2024-05-21 23:59:59'
    AND (
        errorcode IS NOT NULL
        OR errormessage IS NOT NULL
    )
GROUP BY 1,
    2,
    3
ORDER BY 4 DESC;

You select options to view outcomes?

In the outcome analysis, I notice a prevalence of error types specific to Amazon S3, with a notable concentration of issues linked to CORS and object-level configuration. I’m happy to delve further into the matter and uncover any hidden nuances or details by posing supplementary queries. However now let me give pure language question generator one other instruction. Within the disciplines of knowledge, I operate.

According to your previous usage, the top 10 Amazon Web Services (AWS) providers are:

1. Amazon Elastic Compute Cloud (EC2)?
2. Amazon Simple Storage Service (S3)?
3. Amazon Relational Database Service (RDS)?
4. Amazon Elastic Beanstalk?
5. Amazon Lambda?
6. Amazon API Gateway?
7. Amazon SageMaker?
8. AWS Identity and Access Management (IAM)?
9. Amazon CloudWatch?
10. AWS X-Ray? Embrace occasion identify as properly.

What’s the next query? This SQL query retrieves the sector names from a database.eventSource,
eventName, COUNT(*) AS event_countrestricts the dataset to rows where the date falls within the preceding calendar month. WHERE clause, teams the rows by eventSource and eventNameTypes them by the utilization depend, and restrict the end result to 10 rows as I requested

SELECT eventSource,
    eventName,
    COUNT(*) AS event_count
FROM 8a6***
WHERE eventTime >= timestamp '2024-04-21 00:00:00'
    AND eventTime <= timestamp '2024-05-21 23:59:59'
GROUP BY 1,
    2
ORDER BY 3 DESC
LIMIT 10;

I am eager to explore the potential consequences of my previous choices.

With this new insight, I now comprehend the extent of errors recorded over the past month, identifying which services were affected and the root causes of these issues. Consider exploring straightforward questioning methods and executing the derived queries against your data sets to uncover how this feature interacts with your existing information structure?

Pure language processing capabilities are now readily available for testing and validation in a preview environment specifically within the US East (Northern Virginia) region. The Virginia Area, an integral component.

In an effort to gauge customer preferences, we ought to pilot test our new language platform. CloudTrail Lake’s usage-based fees come into play whenever you execute a query to produce insights. FOR ADDITIONAL INFORMATION, PLEASE VISIT…

To gain a head start in leveraging pure language question era for further learning, visit .