PAR18,1.081.08(1.081.08ca``03ЫhlD, CloudTrail CloudTrail( CloudTrail CloudTrailb``p/M )J0#]6,AWSAWS(AWSAWScf``p DD, Management Management( Management Managementb``MKLOM+]\,$7dd15a89-ae0f-4340-8e6c-d6981246c71b$7dd15a89-ae0f-4340-8e6c-d6981246c71b($7dd15a89-ae0f-4340-8e6c-d6981246c71b$7dd15a89-ae0f-4340-8e6c-d6981246c71bcb```fT))i&&fɺ)fF&fIV.,J,cloudcloud(cloudcloudcb```B sKSG,D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 8,(C#9&J, us-east-1 us-east-1( us-east-1 us-east-1cb```fź%S746,AWSAWS(AWSAWScf``p D 4,6cb```fkS' 4,6cb```fkS'(L, CreateUser CreateUser( CreateUser CreateUsercb```fE%ũET 4,6cb```fkS'6Z,iam.amazonaws.comiam.amazonaws.com(iam.amazonaws.comiam.amazonaws.comcb```fzUyzjB\,$c99bf9da-e0bd-4bf7-bb32-c8be25618afc$c99bf9da-e0bd-4bf7-bb32-c8be25618afc($c99bf9da-e0bd-4bf7-bb32-c8be25618afc$c99bf9da-e0bd-4bf7-bb32-c8be25618afccb```fTɖIi)I)&IiIIFIFfi.*N, AssumedRole AssumedRole( AssumedRole AssumedRolecb```fť)A9D 4,6cb```fkS'Tx, AROA2W7SOKHDLNCOKZNPS:Admin-user AROA2W7SOKHDLNCOKZNPS:Admin-user( AROA2W7SOKHDLNCOKZNPS:Admin-user AROA2W7SOKHDLNCOKZNPS:Admin-usercb```fTAF.>~Q~V)yũE^c*,7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user(7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-usercb```f4EyVV%VVFF&&ffVť)E9)yR89.%A,P, 112233445566 112233445566( 112233445566 112233445566cb```fFF&&ffr<`,ASIA2W7SOKHDHBO4U2HEASIA2W7SOKHDHBO4U2HE(ASIA2W7SOKHDHBO4U2HEASIA2W7SOKHDHBO4U2HEcb```fF.N&FMPD,tt(ttcb```fw 4,6cb```fkS'$L,Account ChangeAccount Change(Account ChangeAccount Changec``pLN/+QpHKO|I0,  (  1kM$L,Audit ActivityAudit Activity(Audit ActivityAudit Activityc``p,M,QpL.,,:H0,(cf``p30,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@8,(cb```fd07 "F,SuccessSuccess(SuccessSuccesscb```fdɩmV/(L, test_user2 test_user2( test_user2 test_user2cb```f%%ũEFBz>b,AIDA2W7SOKHDM47UMJRTXAIDA2W7SOKHDM47UMJRTX(AIDA2W7SOKHDM47UMJRTXAIDA2W7SOKHDM47UMJRTXcb```f.F.&桾^A!qȒ<,CreateCreate(CreateCreatecc``p.JM,I_\, 0,(cd``y0,EE(EEs;4\,Account Change: CreateAccount Change: Create(Account Change: CreateAccount Change: Createc``pLN/+QpHKORp.JM,I,6(2userIdentity.sessionContext.sessionIssuer.userName eventTypeM 0KEU OЅD+d/0$G&{yq貋.ff2+bJ~ewKBtjB"Ż4HAbSp`10-# &%;X2g`c2KYHӤ:jcYhR% L,ْgpXXpަ/'˧Lca``Ie%E@1%73̓=\|yFF&&ff mi9ũ@obB/ȰbǂLĜM /(**31 8"x~̱.T,6(true/cf```$XXB$20vxBHaccount_change*5metadata5product %version% %name% % vendor_name%5feature %name% %uid%5profiles %array% %version%%time5cloud %region% %provider%5api 5response %error% %message% % operation% %version%5service %name%5request %uid%5actor5user  %type% %name% %uid% %uuid% % account_uid% %credential_uid%5session% created_time%mfa %issuer% % invoked_by%5idp %name%5 http_request % user_agent%5 src_endpoint %uid% %ip% %domain% % class_name%% class_uid % category_name%% category_uid% severity_id %severity%% status_id %status%5user %name% %uid% % activity_name%% activity_id%type_uid % type_name%5unmapped5map %key% %value%/& %8metadataproductversionj&<1.081.08(1.081.08& %8metadataproductname&< CloudTrail CloudTrail( CloudTrail CloudTrail& %8metadataproduct vendor_name`&<AWSAWS(AWSAWS& %Hmetadataproductfeaturename&< Management Management( Management Management& 5(metadatauid&<$7dd15a89-ae0f-4340-8e6c-d6981246c71b$7dd15a89-ae0f-4340-8e6c-d6981246c71b($7dd15a89-ae0f-4340-8e6c-d6981246c71b$7dd15a89-ae0f-4340-8e6c-d6981246c71b&  %8metadataprofilesarray& <cloudcloud(cloudcloud&  %(metadataversion& < 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2& %time& <(&  5(cloudregion& < us-east-1 us-east-1( us-east-1 us-east-1& %(cloudprovider`&<AWSAWS(AWSAWS& 58apiresponseerror6^&<6& 58apiresponsemessage6^&<6& 5(api operation&< CreateUser CreateUser( CreateUser CreateUser& 5(apiversion6^&<6& 58apiservicename&<iam.amazonaws.comiam.amazonaws.com(iam.amazonaws.comiam.amazonaws.com& 58apirequestuid&<$c99bf9da-e0bd-4bf7-bb32-c8be25618afc$c99bf9da-e0bd-4bf7-bb32-c8be25618afc($c99bf9da-e0bd-4bf7-bb32-c8be25618afc$c99bf9da-e0bd-4bf7-bb32-c8be25618afc& 58actorusertype&< AssumedRole AssumedRole( AssumedRole AssumedRole& 58actorusername6^&<6& 58actoruseruid&< AROA2W7SOKHDLNCOKZNPS:Admin-user AROA2W7SOKHDLNCOKZNPS:Admin-user( AROA2W7SOKHDLNCOKZNPS:Admin-user AROA2W7SOKHDLNCOKZNPS:Admin-user& 58actoruseruuid&<7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user(7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user7arn:aws:sts::112233445566:assumed-role/Admin/Admin-user&% 58actoruser account_uid&%< 112233445566 112233445566( 112233445566 112233445566&& 58actorusercredential_uid&&<ASIA2W7SOKHDHBO4U2HEASIA2W7SOKHDHBO4U2HE(ASIA2W7SOKHDHBO4U2HEASIA2W7SOKHDHBO4U2HE&)58actorsession created_time&)<tt(tt&*58actorsessionmfaPx&*<(&+ 58actorsessionissuer&+<$arn:aws:iam::112233445566:role/Admin$arn:aws:iam::112233445566:role/Admin($arn:aws:iam::112233445566:role/Admin$arn:aws:iam::112233445566:role/Admin&/ 5(actor invoked_by6^&/<6&0 58actoridpname6^&0<6&0 5( http_request user_agent&0< AWS Internal AWS Internal( AWS Internal AWS Internal&2 5( src_endpointuid6^&2<6&3 5( src_endpointip&3< 52.95.4.21 52.95.4.21( 52.95.4.21 52.95.4.21&5 5( src_endpointdomain6^&5<6&5 % class_name&5<Account ChangeAccount Change(Account ChangeAccount Change&7% class_uidb&7<  (  &8 % category_name&8<Audit ActivityAudit Activity(Audit ActivityAudit Activity&:% category_uidb&:<(&;% severity_idb&;<(&< %severity&<< Informational Informational( Informational Informational&>5 status_idn&><(&? 5status&?<SuccessSuccess(SuccessSuccess&A 5(username&A< test_user2 test_user2( test_user2 test_user2&C 5(useruid&C<AIDA2W7SOKHDM47UMJRTXAIDA2W7SOKHDM47UMJRTX(AIDA2W7SOKHDM47UMJRTXAIDA2W7SOKHDM47UMJRTX&E % activity_name~&E<CreateCreate(CreateCreate&F% activity_idb&F<(&G%type_uidb&G<EE(EE&I % type_name&I<Account Change: CreateAccount Change: Create(Account Change: CreateAccount Change: Create&K %8unmappedmapkey&K<6(2userIdentity.sessionContext.sessionIssuer.userName eventType&P %8unmappedmapvalue&P<6(true/,I,parquet.avro.schema{"type":"record","name":"account_change","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"vendor_name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}}]}},{"name":"uid","type":["null","string"],"default":null},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"region","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"api","type":{"type":"record","name":"api_record","fields":[{"name":"response","type":{"type":"record","name":"apiresponse_record","fields":[{"name":"error","type":["null","string"],"default":null},{"name":"message","type":["null","string"],"default":null}]}},{"name":"operation","type":["null","string"],"default":null},{"name":"version","type":["null","string"],"default":null},{"name":"service","type":{"type":"record","name":"apiservice_record","fields":[{"name":"name","type":["null","string"],"default":null}]}},{"name":"request","type":{"type":"record","name":"apirequest_record","fields":[{"name":"uid","type":["null","string"],"default":null}]}}]}},{"name":"actor","type":{"type":"record","name":"actor_record","fields":[{"name":"user","type":{"type":"record","name":"actoruser_record","fields":[{"name":"type","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"credential_uid","type":["null","string"],"default":null}]}},{"name":"session","type":{"type":"record","name":"actorsession_record","fields":[{"name":"created_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"issuer","type":["null","string"],"default":null}]}},{"name":"invoked_by","type":["null","string"],"default":null},{"name":"idp","type":{"type":"record","name":"actoridp_record","fields":[{"name":"name","type":["null","string"],"default":null}]}}]}},{"name":"http_request","type":{"type":"record","name":"http_request_record","fields":[{"name":"user_agent","type":["null","string"],"default":null}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"domain","type":["null","string"],"default":null}]}},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"status_id","type":["null","int"],"default":null},{"name":"status","type":["null","string"],"default":null},{"name":"user","type":{"type":"record","name":"user_record","fields":[{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null}]}},{"name":"activity_name","type":"string"},{"name":"activity_id","type":"int"},{"name":"type_uid","type":"int"},{"name":"type_name","type":"string"},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber})/&PAR1