Skip to content

Latest commit

 

History

History
33 lines (23 loc) · 1.75 KB

README.md

File metadata and controls

33 lines (23 loc) · 1.75 KB

CloudTrail

Parity grade: A · SDK aws-sdk-go-v2/service/cloudtrail@v1.65.3 · last audited 2026-10-07 (d522d763f)

Coverage

Metric Value
PARITY entries audited 60 (49 ok, 11 partial)
Known gaps 2
Structural gaps (can't be emulated) 4
Deferred items 0
Resource leaks fixed

Known gaps

  • gopherstack-53eh: unaliased aggregates are named _col by position, inferred from Trino; AWS documents no naming convention, so it is unverifiable.
  • GetEventDataStore PartitionKeys content is AWS-computed and undocumented in the SDK; StartQuery QueryParameters ($StartTime$/$EndTime$/$Period$) are recorded on the Query but their substitution semantics are undocumented.

Structural gaps

These do not block an A grade — no implementation could produce real data here because the underlying data source cannot exist in an emulator.

  • ListInsightsData/ListPublicKeys/SearchSampleQueries return empty lists: no Insight events are generated, no log-file digests are signed, and the sample-query catalog is AWS-owned data. ListInsightsMetricData is computed from recorded events.
  • Org delegated-admin state is unmodeled (no read-back op upstream), so GetResourcePolicy's DelegatedAdminResourcePolicy is never populated.
  • GetChannel IngestionStatus/SourceConfig need the CloudTrail Data PutAuditEvents ingest path (no such service exists here); GetImport ImportStatistics needs real import execution.
  • Log delivery writes one gzipped file per event instead of ~5-minute batches: batching is a real-time property and tests would have to wait out the window.

More