Feature request: Open Source for Recent Permission Errors from CloudTrail

[kmcquade]

As discussed previously, the "Recent permission errors" add on is not part of the open source yet. Would be very helpful to have that included.

[castrapel]

This is now supported via Event Bus, but documentation is needed.

TLDR: funnel all of your cloudtrail events to a single account using Event Bus rules. On a given account, set up a rule to send AccessDenied messages to an SNS topic. Create an SQS queue and a subscription to the SNS topic, then give ConsoleMe permission to that queue, and configure ConsoleMe to use that queue to determine cloudtrial denies.