{"id":"5a510ea2-aef3-4743-9ab3-1539362ced4b","shortId":"c6CaSf","kind":"skill","title":"AWS CloudTrail Log Normalizer","tagline":"Normalizes and enriches AWS CloudTrail JSON logs into OCSF (Open Cybersecurity Schema Framework) format. Maps eventSource/eventName pairs to MITRE ATT&CK technique IDs using the MITRE ATT&CK STIX API.","description":"# AWS CloudTrail Log Normalizer\n\nNormalizes and enriches AWS CloudTrail JSON logs into OCSF (Open Cybersecurity Schema Framework) format. Maps eventSource/eventName pairs to MITRE ATT&CK technique IDs using the MITRE ATT&CK STIX API.\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- Let’s walk through setting up a project that depends on DynamoDB from the SDK and makes a simple service call. The following steps use yarn as an example. These steps assume you have Node.js and yarn already installed.\n- git clone https://github.com/aws/aws-sdk-js-v3.git\n- yarn && yarn test:all\n- yarn pack .\n\nRequirements and caveats from upstream:\n- To test your universal JavaScript code in Node.js, browser and react-native environments,\n- [Node.js and ECMAScript Version Support Policy](#nodejs-and-ecmascript-version-support-policy)\n- Create a new Node.js project.\n\nBasic usage or getting-started notes:\n- [Getting Started](#getting-started)\n- Inside of the project, run: yarn add @aws-sdk/client-dynamodb. Adding packages results in update in lock file, [yarn.lock](https://yarnpkg.com/getting-started/qa/#should-lockfiles-be-committed-to-the-repository) or [p...\n- Create a new file called index.js, create a DynamoDB service client and send a request.\n\n- Source: https://github.com/aws/aws-sdk-js-v3\n- Extracted from upstream docs: https://raw.githubusercontent.com/aws/aws-sdk-js-v3/HEAD/README.md\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/aws-cloudtrail-log-normalizer/)","tags":["aws","cloudtrail","log","normalizer","skills","agentskillexchange","agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex"],"capabilities":["skill","source-agentskillexchange","skill-aws-cloudtrail-log-normalizer","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/aws-cloudtrail-log-normalizer","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,539 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:09:31.974Z","embedding":null,"createdAt":"2026-05-18T13:15:17.843Z","updatedAt":"2026-05-18T19:09:31.974Z","lastSeenAt":"2026-05-18T19:09:31.974Z","tsv":"'/aws/aws-sdk-js-v3':223 '/aws/aws-sdk-js-v3.git':124 '/aws/aws-sdk-js-v3/head/readme.md':230 '/client-dynamodb':190 '/getting-started/qa/#should-lockfiles-be-committed-to-the-repository)':202 '/skills/aws-cloudtrail-log-normalizer/)':237 'ad':191 'add':186 'agent':232 'agentskillexchange.com':236 'agentskillexchange.com/skills/aws-cloudtrail-log-normalizer/)':235 'alreadi':118 'api':34,68 'assum':112 'att':24,31,58,65 'aw':1,8,35,42,188 'aws-sdk':187 'basic':168 'browser':144 'call':101,209 'caveat':133 'ck':25,32,59,66 'client':215 'clone':121 'cloudtrail':2,9,36,43 'code':141 'creat':163,205,211 'cybersecur':15,49 'depend':90 'doc':227 'dynamodb':92,213 'ecmascript':152,159 'enrich':7,41 'environ':80,149 'eventsource/eventname':20,54 'exampl':109 'exchang':234 'extract':224 'file':198,208 'follow':103 'format':18,52 'framework':17,51 'get':172,175,178 'getting-start':171,177 'git':120 'github.com':123,222 'github.com/aws/aws-sdk-js-v3':221 'github.com/aws/aws-sdk-js-v3.git':122 'id':27,61 'index.js':210 'insid':180 'instal':69,73,119 'javascript':140 'json':10,44 'let':81 'lock':197 'log':3,11,37,45 'make':97 'map':19,53 'match':78 'mitr':23,30,57,64 'nativ':148 'new':165,207 'node.js':115,143,150,166 'nodej':157 'nodejs-and-ecmascript-version-support-polici':156 'normal':4,5,38,39 'note':174 'ocsf':13,47 'open':14,48 'p':204 'pack':130 'packag':192 'pair':21,55 'path':76 'polici':155,162 'project':88,167,183 'raw.githubusercontent.com':229 'raw.githubusercontent.com/aws/aws-sdk-js-v3/head/readme.md':228 'react':147 'react-nat':146 'request':219 'requir':131 'result':193 'run':184 'schema':16,50 'sdk':95,189 'send':217 'servic':100,214 'set':85 'setup':75 'simpl':99 'skill':233 'skill-aws-cloudtrail-log-normalizer' 'sourc':220,231 'source-agentskillexchange' 'start':173,176,179 'step':104,111 'stix':33,67 'support':154,161 'techniqu':26,60 'test':127,137 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'univers':139 'updat':195 'upstream':72,135,226 'usag':169 'use':28,62,70,105 'version':153,160 'walk':83 'yarn':106,117,125,126,129,185 'yarn.lock':199 'yarnpkg.com':201 'yarnpkg.com/getting-started/qa/#should-lockfiles-be-committed-to-the-repository)':200","prices":[{"id":"466f54e4-eda1-4dec-9ea9-d32e9b5c91db","listingId":"5a510ea2-aef3-4743-9ab3-1539362ced4b","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:15:17.843Z"}],"sources":[{"listingId":"5a510ea2-aef3-4743-9ab3-1539362ced4b","source":"github","sourceId":"agentskillexchange/skills/aws-cloudtrail-log-normalizer","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/aws-cloudtrail-log-normalizer","isPrimary":false,"firstSeenAt":"2026-05-18T13:15:17.843Z","lastSeenAt":"2026-05-18T19:09:31.974Z"}],"details":{"listingId":"5a510ea2-aef3-4743-9ab3-1539362ced4b","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"aws-cloudtrail-log-normalizer","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"52fc55001eaa3ec7b37254adea3ae9c91a1e7bec","skill_md_path":"skills/aws-cloudtrail-log-normalizer/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/aws-cloudtrail-log-normalizer"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"AWS CloudTrail Log Normalizer","description":"Normalizes and enriches AWS CloudTrail JSON logs into OCSF (Open Cybersecurity Schema Framework) format. Maps eventSource/eventName pairs to MITRE ATT&CK technique IDs using the MITRE ATT&CK STIX API."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/aws-cloudtrail-log-normalizer"},"updatedAt":"2026-05-18T19:09:31.974Z"}}