Super CloudTrail

Create ECS task execution role and task role with cloudtrail:LookupEvents permission.

Create a file named task-definition.json with this JSON content (replace role ARNs, subnet-12345, sg-12345, and log region with your actual values):

{"family": "super-cloudtrail", "networkMode": "awsvpc", "requiresCompatibilities": ["FARGATE"], "cpu": "512", "memory": "1024", "executionRoleArn": "EXEC_ROLE_ARN", "taskRoleArn": "TASK_ROLE_ARN", "containerDefinitions": [{"name": "super-cloudtrail", "image": "709825985650.dkr.ecr.us-east-1.amazonaws.com/cloudsnorkel/super/cloudtrail:v1.0.3", "portMappings": [{"containerPort": 80, "protocol": "tcp"}], "environment": [{"name": "PORT", "value": "80"}, {"name": "AUTH_USERNAME", "value": "admin"}, {"name": "AUTH_PASSWORD", "value": "your-secure-password"}], "logConfiguration": {"logDriver": "awslogs", "options": {"awslogs-group": "super-cloudtrail", "awslogs-region": "us-east-1", "awslogs-stream-prefix": "ecs"}}}]}

Run these AWS CLI commands:

aws ecs register-task-definition --cli-input-json file://task-definition.json

aws ecs create-service --cluster your-cluster --service-name super-cloudtrail --task-definition super-cloudtrail --desired-count 1 --launch-type FARGATE --network-configuration "awsvpcConfiguration={subnets=[subnet-12345],securityGroups=[sg-12345],assignPublicIp=ENABLED}"

• Find your service's public IP in ECS console
• Open http://YOUR-PUBLIC-IP  in browser
• Login with credentials from environment variables

Run these kubectl commands:

• kubectl create namespace super-cloudtrail
• kubectl create serviceaccount super-cloudtrail-sa -n super-cloudtrail
• kubectl create configmap super-cloudtrail-config -n super-cloudtrail --from-literal=PORT=80 --from-literal=AUTH_USERNAME=admin --from-literal=AUTH_PASSWORD=your-secure-password

Attach IAM role to service account with cloudtrail:LookupEvents permission.

Create deployment.json with this JSON content:

{"apiVersion": "apps/v1", "kind": "Deployment", "metadata": {"name": "super-cloudtrail", "namespace": "super-cloudtrail"}, "spec": {"replicas": 1, "selector": {"matchLabels": {"app": "super-cloudtrail"}}, "template": {"metadata": {"labels": {"app": "super-cloudtrail"}}, "spec": {"serviceAccountName": "super-cloudtrail-sa", "containers": [{"name": "super-cloudtrail", "image": "709825985650.dkr.ecr.us-east-1.amazonaws.com/cloudsnorkel/super/cloudtrail:v1.0.3", "ports": [{"containerPort": 80}], "envFrom": [{"configMapRef": {"name": "super-cloudtrail-config"}}], "resources": {"requests": {"memory": "512Mi", "cpu": "250m"}, "limits": {"memory": "1Gi", "cpu": "500m"}}}]}}}}

Create service.json with this JSON content:

{"apiVersion": "v1", "kind": "Service", "metadata": {"name": "super-cloudtrail-service", "namespace": "super-cloudtrail"}, "spec": {"selector": {"app": "super-cloudtrail"}, "ports": [{"port": 80, "targetPort": 80}], "type": "LoadBalancer"}}

Run these kubectl commands:

• kubectl apply -f deployment.json
• kubectl apply -f service.json

• Get LoadBalancer IP: kubectl get svc -n super-cloudtrail
• Open http://LOADBALANCER-IP  in browser
• Login with credentials from ConfigMap

• PORT: Web server port (default: 80)
• AUTH_USERNAME: Basic auth username (optional)
• AUTH_PASSWORD: Basic auth password (optional)

Security Note: Set AUTH_USERNAME and AUTH_PASSWORD as CloudTrail events contain sensitive information.

Your task/container role needs:

• cloudtrail:LookupEvents

• Check application status at /help page
• Monitor ECS task health or Kubernetes pod status
• View CloudWatch logs for troubleshooting