amazon-web-services - 从事件规则中捕获数组键的特定值及其在 Input Transformer 中的值

Question

我创建了一个规则，用于捕获谁使用云跟踪创建了 Ec2 实例。我收到以下基于事件的云跟踪事件的json。

                    "rootDeviceType": "",
                    "rootDeviceName": "",
                    "blockDeviceMapping": {},
                    "virtualizationType": "",
                    "hypervisor": "",
                    "tagSet": {
                        "items": [
                            {
                                "key": "abc",
                                "value": "abc123"
                            },
                            {
                                "key": "pqr",
                                "value": "pqr123"
                            },
                            {
                                "key": "lkp",
                                "value": "lkp123"
                            },
                            {
                                "key": "yui",
                                "value": "yui111"
                            },
                            {
                                "key": "terra",
                                "value": "terra123"
                            }
                           
                        ]
                    },
                    "clientToken": "",
                    "groupSet": {
                        "items": [
                            {
                                "groupId": "",
                                "groupName": ""
                            }
                        ]
                    }

我想捕获 key="lkp" 的值，但每次索引 2 处都不会出现键 lkp。我想查找 key=lkp 并在 SNS 主题的输入转换器中捕获它的值。

"resource_name": "$.detail.tagSet.items[2][value]"

标签： amazon-web-servicescloudamazon-cloudwatchamazon-snsamazon-cloudtrail