apis-2.json

{
    "detail-type": [
        "AWS API Call via CloudTrail"
    ],
    "source": [
        "aws.rds",
        "aws.dynamodb",
        "aws.secretsmanager",
        "aws.ssm"
    ],
    "detail": {
        "eventSource": [
            "rds.amazonaws.com",
            "dynamodb.amazonaws.com",
            "secretsmanager.amazonaws.com",
            "ssm.amazonaws.com"
        ],
        "eventName": [
            "DeleteDBInstance",
            "DeleteDBCluster",
            "DeleteTable",
            "CreateDBInstance",
            "CreateDBCluster",
            "CreateTable",
            "ModifyDBInstance",
            "ModifyDBCluster",
            "StopDBInstance",
            "StopDBCluster",
            "StartDBInstance",
            "StartDBCluster",
            "RebootDBInstance",
            "GetParameter",
            "DescribeParameters",
            "PutParameter",
            "DeleteParameter",
            "GetSecretValue",
            "UpdateSecret",
            "DeleteSecret",
            "PutSecretValue"
        ]
    }
}