AWS-SUMMARIZE-ACCOUNT-ACTIVITY

Summary from the TLDR InfoSec newsletter

A Python script to analyze CloudTrail data of a given AWS account and generate a summary of recently active IAM principals, API calls they made, and regions that they were active in. The summary is written to a JSON file and can be optionally visualized as a PNG file.