PAR18,1.081.08(1.081.08ca``03ЫhlD, CloudTrail CloudTrail( CloudTrail CloudTrailb``p/M )J0#]6,AWSAWS(AWSAWScf``p DD, Management Management( Management Managementb``MKLOM+]\,$7b414d15-cb9b-4bfa-88dd-68b42f1d60e8$7b414d15-cb9b-4bfa-88dd-68b42f1d60e8($7b414d15-cb9b-4bfa-88dd-68b42f1d60e8$7b414d15-cb9b-4bfa-88dd-68b42f1d60e8cb```fTI&&)II&Ii))fI&Fi)fۂ~.,J,cloudcloud(cloudcloudcb```B sKSG,D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 8,PˬPˬ(PˬPˬ 8FلP&J, us-east-1 us-east-1( us-east-1 us-east-1cb```fź%S746,AWSAWS(AWSAWScf``p D 4,6cb```fkS' 4,6cb```fkS'(L, CreateRole CreateRole( CreateRole CreateRolecb```fE%A9\s 4,6cb```fkS'6Z,iam.amazonaws.comiam.amazonaws.com(iam.amazonaws.comiam.amazonaws.comcb```fzUyzjB\,$ab1441af-76c1-4476-9f52-30d070ac4eba$ab1441af-76c1-4476-9f52-30d070ac4eba($ab1441af-76c1-4476-9f52-30d070ac4eba$ab1441af-76c1-4476-9f52-30d070ac4ebacb```fTI&&ifɆ&&fiF)&IZ.*N, AssumedRole AssumedRole( AssumedRole AssumedRolecb```fť)A9D 4,6cb```fkS'Tx, AROAIOJRFK4IOK6BW5ISY:Admin-user AROAIOJRFK4IOK6BW5ISY:Admin-user( AROAIOJRFK4IOK6BW5ISY:Admin-user AROAIOJRFK4IOK6BW5ISY:Admin-usercb```fTA^An&fNᦞV)yũE*,7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user(7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-usercb```f4EyVV%VVFF&&ffVť)E9)yR89.%A,P, 112233445566 112233445566( 112233445566 112233445566cb```fFF&&ffr<`,ASIAXTKM3VWIT242TLUSASIAXTKM3VWIT242TLUS(ASIAXTKM3VWIT242TLUSASIAXTKM3VWIT242TLUScb```f!޾a!F&F!>?D,TT(TTcb```fR~6,(cb```fdOA\,$arn:aws:iam::112233445566:role/Admin$arn:aws:iam::112233445566:role/Admin($arn:aws:iam::112233445566:role/Admin$arn:aws:iam::112233445566:role/Admincb```fTEyVVVVFF&&ffVE9)y1.Lp,cloudformation.amazonaws.comcloudformation.amazonaws.com(cloudformation.amazonaws.comcloudformation.amazonaws.comcb```f9)iE%yzUyz+oL& 4,6cb```fkS',P, AWS Internal AWS Internal( AWS Internal AWS Internalcb```f y%Ey9eM 4,6cb```fkS' 4,6cb```fkS'Lp,cloudformation.amazonaws.comcloudformation.amazonaws.com(cloudformation.amazonaws.comcloudformation.amazonaws.comcb```f9)iE%yzUyz+oL&$L,Account ChangeAccount Change(Account ChangeAccount Changec``pLN/+QpHKO|I0,  (  1kM$L,Audit ActivityAudit Activity(Audit ActivityAudit Activityc``p,M,QpL.,,:H0,(cf``p30,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@8,(cb```fd07 "F,SuccessSuccess(SuccessSuccesscb```fdɩmV/0T,User-Role-NameUser-Role-Name(User-Role-NameUser-Role-Namecb```fũEA9~ʒR>b,AROAXTKM3VWIVSRGSFG7JAROAXTKM3VWIVSRGSFG7J(AROAXTKM3VWIVSRGSFG7JAROAXTKM3VWIVSRGSFG7Jcb```fA!޾aaAn^<,CreateCreate(CreateCreatecc``p.JM,I_\, 0,(cd``y0,EE(EEs;4\,Account Change: CreateAccount Change: Create(Account Change: CreateAccount Change: Createc``pLN/+QpHKORp.JM,I , 6(2userIdentity.sessionContext.sessionIssuer.userName eventTypeP=K1]O  AQ"m!4M̬^|"3f{s4 zepBzJt0B"!~u [PL=,ێXicp&;IoF2U_9w N+V)+ Ih9S0aԂHmQY{D7t3[rYpv.I[lgq2;MZϲ;Li^I]BLeOQK00_Wn6m7[:ԡ =z@Ҏsm $}_qY@aܒy+ZP}n /ZYWi Ƭ4X.Y,@JkFV\ E͏,BABM]&nᾶY >|,MqO{?\-2peYk×r,Gш{I;"hɈ%# 8lml<;6ge MŐɤЌ!QI2 4 8pι|_nFnHgQ?%i0V, 6(l{"Statement":[{"Action":["sts:AssumeRole"],"Effect":"Allow","Principal":{"Service":["ec2.amazonaws.com"]}}]}ca```'XXBfXiLBHaccount_change*5metadata5product %version% %name% % vendor_name%5feature %name% %uid%5profiles %array% %version%%time5cloud %region% %provider%5api 5response %error% %message% % operation% %version%5service %name%5request %uid%5actor5user  %type% %name% %uid% %uuid% % account_uid% %credential_uid%5session% created_time%mfa %issuer% % invoked_by%5idp %name%5 http_request % user_agent%5 src_endpoint %uid% %ip% %domain% % class_name%% class_uid % category_name%% category_uid% severity_id %severity%% status_id %status%5user %name% %uid% % activity_name%% activity_id%type_uid % type_name%5unmapped5map %key% %value%/& %8metadataproductversionj&<1.081.08(1.081.08& %8metadataproductname&< CloudTrail CloudTrail( CloudTrail CloudTrail& %8metadataproduct vendor_name`&<AWSAWS(AWSAWS& %Hmetadataproductfeaturename&< Management Management( Management Management& 5(metadatauid&<$7b414d15-cb9b-4bfa-88dd-68b42f1d60e8$7b414d15-cb9b-4bfa-88dd-68b42f1d60e8($7b414d15-cb9b-4bfa-88dd-68b42f1d60e8$7b414d15-cb9b-4bfa-88dd-68b42f1d60e8&  %8metadataprofilesarray& <cloudcloud(cloudcloud&  %(metadataversion& < 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2& %time& <PˬPˬ(PˬPˬ&  5(cloudregion& < us-east-1 us-east-1( us-east-1 us-east-1& %(cloudprovider`&<AWSAWS(AWSAWS& 58apiresponseerror6^&<6& 58apiresponsemessage6^&<6& 5(api operation&< CreateRole CreateRole( CreateRole CreateRole& 5(apiversion6^&<6& 58apiservicename&<iam.amazonaws.comiam.amazonaws.com(iam.amazonaws.comiam.amazonaws.com& 58apirequestuid&<$ab1441af-76c1-4476-9f52-30d070ac4eba$ab1441af-76c1-4476-9f52-30d070ac4eba($ab1441af-76c1-4476-9f52-30d070ac4eba$ab1441af-76c1-4476-9f52-30d070ac4eba& 58actorusertype&< AssumedRole AssumedRole( AssumedRole AssumedRole& 58actorusername6^&<6& 58actoruseruid&< AROAIOJRFK4IOK6BW5ISY:Admin-user AROAIOJRFK4IOK6BW5ISY:Admin-user( AROAIOJRFK4IOK6BW5ISY:Admin-user AROAIOJRFK4IOK6BW5ISY:Admin-user& 58actoruseruuid&<7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user(7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user&% 58actoruser account_uid&%< 112233445566 112233445566( 112233445566 112233445566&& 58actorusercredential_uid&&<ASIAXTKM3VWIT242TLUSASIAXTKM3VWIT242TLUS(ASIAXTKM3VWIT242TLUSASIAXTKM3VWIT242TLUS&)58actorsession created_time&)<TT(TT&*58actorsessionmfaPx&*<(&+ 58actorsessionissuer&+<$arn:aws:iam::112233445566:role/Admin$arn:aws:iam::112233445566:role/Admin($arn:aws:iam::112233445566:role/Admin$arn:aws:iam::112233445566:role/Admin&/ 5(actor invoked_by&/<cloudformation.amazonaws.comcloudformation.amazonaws.com(cloudformation.amazonaws.comcloudformation.amazonaws.com&2 58actoridpname6^&2<6&3 5( http_request user_agent&3< AWS Internal AWS Internal( AWS Internal AWS Internal&5 5( src_endpointuid6^&5<6&5 5( src_endpointip6^&5<6&6 5( src_endpointdomain&6<cloudformation.amazonaws.comcloudformation.amazonaws.com(cloudformation.amazonaws.comcloudformation.amazonaws.com&9 % class_name&9<Account ChangeAccount Change(Account ChangeAccount Change&;% class_uidb&;<  (  &< % category_name&<<Audit ActivityAudit Activity(Audit ActivityAudit Activity&>% category_uidb&><(&?% severity_idb&?<(&@ %severity&@< Informational Informational( Informational Informational&B5 status_idn&B<(&C 5status&C<SuccessSuccess(SuccessSuccess&E 5(username&E<User-Role-NameUser-Role-Name(User-Role-NameUser-Role-Name&G 5(useruid&G<AROAXTKM3VWIVSRGSFG7JAROAXTKM3VWIVSRGSFG7J(AROAXTKM3VWIVSRGSFG7JAROAXTKM3VWIVSRGSFG7J&I % activity_name~&I<CreateCreate(CreateCreate&J% activity_idb&J<(&L%type_uidb&L<EE(EE&M % type_name&M<Account Change: CreateAccount Change: Create(Account Change: CreateAccount Change: Create&O %8unmappedmapkey  &O<6(2userIdentity.sessionContext.sessionIssuer.userName eventType&U %8unmappedmapvalue  &U<6(l{"Statement":[{"Action":["sts:AssumeRole"],"Effect":"Allow","Principal":{"Service":["ec2.amazonaws.com"]}}]},V,parquet.avro.schema{"type":"record","name":"account_change","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"vendor_name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}}]}},{"name":"uid","type":["null","string"],"default":null},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"region","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"api","type":{"type":"record","name":"api_record","fields":[{"name":"response","type":{"type":"record","name":"apiresponse_record","fields":[{"name":"error","type":["null","string"],"default":null},{"name":"message","type":["null","string"],"default":null}]}},{"name":"operation","type":["null","string"],"default":null},{"name":"version","type":["null","string"],"default":null},{"name":"service","type":{"type":"record","name":"apiservice_record","fields":[{"name":"name","type":["null","string"],"default":null}]}},{"name":"request","type":{"type":"record","name":"apirequest_record","fields":[{"name":"uid","type":["null","string"],"default":null}]}}]}},{"name":"actor","type":{"type":"record","name":"actor_record","fields":[{"name":"user","type":{"type":"record","name":"actoruser_record","fields":[{"name":"type","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"credential_uid","type":["null","string"],"default":null}]}},{"name":"session","type":{"type":"record","name":"actorsession_record","fields":[{"name":"created_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"issuer","type":["null","string"],"default":null}]}},{"name":"invoked_by","type":["null","string"],"default":null},{"name":"idp","type":{"type":"record","name":"actoridp_record","fields":[{"name":"name","type":["null","string"],"default":null}]}}]}},{"name":"http_request","type":{"type":"record","name":"http_request_record","fields":[{"name":"user_agent","type":["null","string"],"default":null}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"domain","type":["null","string"],"default":null}]}},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"status_id","type":["null","int"],"default":null},{"name":"status","type":["null","string"],"default":null},{"name":"user","type":{"type":"record","name":"user_record","fields":[{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null}]}},{"name":"activity_name","type":"string"},{"name":"activity_id","type":"int"},{"name":"type_uid","type":"int"},{"name":"type_name","type":"string"},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber})/ (PAR1