From 97b1f5ab312f30d3333f42e2de3aa0eba294d9d5 Mon Sep 17 00:00:00 2001 From: Ian Lee Date: Wed, 11 Feb 2026 17:05:52 -0800 Subject: [PATCH] Update CloudTrail validate-logs for full key query range --- awscli/customizations/cloudtrail/validation.py | 6 +++++- tests/unit/customizations/cloudtrail/test_validation.py | 4 +++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/awscli/customizations/cloudtrail/validation.py b/awscli/customizations/cloudtrail/validation.py index 52cd58af2e04..104a5b2cf83f 100644 --- a/awscli/customizations/cloudtrail/validation.py +++ b/awscli/customizations/cloudtrail/validation.py @@ -585,7 +585,11 @@ def traverse_digests(self, start_date, end_date=None, is_backfill=False): # For regular digests, pre-load public keys. For backfill, start with empty dict public_keys = ( - {} if is_backfill else self._load_public_keys(start_date, end_date) + {} + if is_backfill + else self._load_public_keys( + start_date, end_date + timedelta(hours=2) + ) ) yield from self._traverse_digest_chain( diff --git a/tests/unit/customizations/cloudtrail/test_validation.py b/tests/unit/customizations/cloudtrail/test_validation.py index 8f04908028ed..7d668b72953e 100644 --- a/tests/unit/customizations/cloudtrail/test_validation.py +++ b/tests/unit/customizations/cloudtrail/test_validation.py @@ -994,7 +994,9 @@ def test_ensures_public_keys_are_loaded(self): digest_iter = traverser.traverse_digests(start_date, end_date) with self.assertRaises(RuntimeError): next(digest_iter) - key_provider.get_public_keys.assert_called_with(start_date, end_date) + key_provider.get_public_keys.assert_called_with( + start_date, end_date + timedelta(hours=2) + ) def test_ensures_public_key_is_found(self): start_date = START_DATE