The Amazon dashboards are covering the following categories.
AWS cloud trail log activity
Each widget details a specific log type to be reported on, such as
Cloud Trail Log Activity -
Event by name
SRC ADDR the source address of the activity either FQDN or IP as provided in the event
User Name - the user that triggered the event
User type - the user role and type
User agent -
Lambda Cold Start Events by Username -
Customer Allocated IP Address Reports -
Events using Stolen Lambda Credentials -
Some examples of the dashboards for this area is below.
