You need to investigate unauthorized IAM activity in your AWS account. How would you use CloudTrail to identify when and who performed the action?

Question

Lingesh Kumar K · Accepted Answer

To investigate IAM actions: filter CloudTrail logs for eventName and userIdentity.