CloudTrail を S3 に保存しておき(設定方法はコチラ)、Athena で集計してみた。 eventsource で集計 select eventsource, count(1) as cnt from default.cloudtrail_logs_cloudtrail_do_not_delete group by eventsource order by cnt desc eventsource count s3.amazonaws.com 1111063 ec2.amazonaws.com 86762 sts.amazonaws.com 52597 athena.amazonaws.com 10359 ssm.amazonaws.com 8277 glue.amazonaws.com 2114 cloudformation.amazonaws.com 1882 kms.am