Query: List events for a specific service (IAM) that occurred over the last hour

Description

This query allows users to monitor recent activity for a specific service, in this case, AWS's Identity and Access Management (IAM). It is particularly useful for security audits, as it provides a chronological overview of events, including who initiated them and what actions were taken, over the last hour.

Query

Tables used in this query:

• aws_cloudtrail_trail_event

SQL