Aqua CSPM Events is a dynamic service that is updated on a continual basis as cloud providers add additional events, services, and APIs. The list of supported services and calls below is a sample of event types that may change as cloud provider APIs change.


  • AWS
    • ACM
      • RequestCertificate
    • CloudTrail
      • DeleteTrail
      • RemoveTags
      • StopLogging
      • UpdateTrail
    • Config
      • DeleteConfigRule
      • DeleteDeliveryChannel
      • DeleteEvaluationResults
      • StopConfigurationRecorder
    • EC2
      • AcceptVpcPeeringConnection
      • AuthorizeSecurityGroupEgress
      • AuthorizeSecurityGroupIngress
      • CreateNetworkAclEntry
      • CreateSecurityGroup
      • CreateVpcPeeringConnection
      • DeleteFlowLogs
      • DeleteSecurityGroup
      • ImportKeyPair
    • IAM
      • ChangePassword
      • CreateAccessKey
      • CreateUser
      • DeactivateMFADevice
      • DeleteAccessKey
      • DeleteAccountPasswordPolicy
      • DeleteVirtualMFADevice
      • UpdateAccountPasswordPolicy
      • UpdateSSHPublicKey
      • UploadServerCertificate
      • UploadSigningCertificate
      • UploadSSHPublicKey
    • KMS
      • DisableKeyRotation
    • Logs
      • DeleteLogGroup
      • DeleteLogStream
    • RDS
      • AuthorizeDBSecurityGroupIngress
    • S3
      • CreateBucket
      • DeleteBucketEncryption
      • PutBucketAcl
      • PutBucketPolicy
    • SES
      • VerifyDomainDkim
      • VerifyDomainIdentity
      • VerifyEmailAddress
      • VerifyEmailIdentity
    • Signin
      • ConsoleLogin
  • Azure
    • Activity Log Alerts
      • Microsoft.insights/activityLogAlerts/delete
      • Microsoft.insights/activityLogAlerts/write
    • Network Security Groups
      • Microsoft.Network/networkSecurityGroups/securityRules/write
    • Storage Accounts
      • Microsoft.Storage/storageAccounts/write
    • Web Apps
      • Microsoft.Web/sites/write