PAR18,1.031.03(1.031.03ca``030XrD, CloudTrail CloudTrail( CloudTrail CloudTrailb``p/M )J0#]6,AWSAWS(AWSAWScf``p DDl,Management, Data, and InsightsManagement, Data, and Insights(Management, Data, and InsightsManagement, Data, and Insightsc``MKLOM+QpI,IQHKQ+L()l5"\,$6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE$6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE($6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE$6f4ab5bd-2daa-4d00-be14-d92efEXAMPLEcb```fTfi&II)F)&)I&)Fi>4.,J,cloudcloud(cloudcloudcb```B sKSG,D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 8,sSsS(sSsS[R0#GM&J, us-west-2 us-west-2( us-west-2 us-west-2cb```fź%F6,AWSAWS(AWSAWScf``p D 4,6cb```fkS' 4,6cb```fkS'8\,CreateLoadBalancerCreateLoadBalancer(CreateLoadBalancerCreateLoadBalancercb```fE%>)N9yɩEk(L, 2015-12-01 2015-12-01( 2015-12-01 2015-12-01cb```fFFGHX|,"elasticloadbalancing.amazonaws.com"elasticloadbalancing.amazonaws.com("elasticloadbalancing.amazonaws.com"elasticloadbalancing.amazonaws.comcb```fT9%9)I9yəyzUyz=O,\,$b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE$b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE($b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE$b9960276-b9b2-11e3-8a13-f1ef1EXAMPLEcb```fTIfFfIIFƺƺii>Ƴ.:,6cb```Bk e :,6cb```Bk e :,6cb```Bk e "F,IAMUserIAMUser(IAMUserIAMUsercb```fdũEB,AliceAlice(AliceAlicecb```fd9ɩXc,P, 123456789012 123456789012( 123456789012 123456789012cb```fF&fFpj\,$arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alice($arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alicecb```fTEyVVVVF&fFVũE9ɩ.,P, 123456789012 123456789012( 123456789012 123456789012cb```fF&fFpj<`,AKIAIOSFODNN7EXAMPLEAKIAIOSFODNN7EXAMPLE(AKIAIOSFODNN7EXAMPLEAKIAIOSFODNN7EXAMPLEcb```fޞn.~~>^ 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS'~,5aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.15aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.1(5aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.15aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.1cb```f4ź9z@PYogg_^o__ Tgg+? 4,6cb```fkS',P, 198.51.100.1 198.51.100.1( 198.51.100.1 198.51.100.1cb```fzzz.;M 4,6cb```fkS' H, API Activity API Activity( API Activity API Activitya``p TpL.,,H0,  (   $L,Audit ActivityAudit Activity(Audit ActivityAudit Activityc``p,M,QpL.,,:H0,(cf``p30,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@"F,SuccessSuccess(SuccessSuccesscb```fdɩmV/8,(cb```fd07 <,CreateCreate(CreateCreatecc``p.JM,I_\, 0,(cd``y0,ՕՕ(ՕՕ:)z0X,API Activity: CreateAPI Activity: Create(API Activity: CreateAPI Activity: Createa``p TpL.,,Rp.JM,Iw ,$6(&responseElements.loadBalancers[].vpcId eventTypeRKK1^RJR/VC_?ݡ:dhnG}&L]4nӺ_ +hC=lsQwk8EaJYrfӰz6lZ fȍ*IO #{TۂLR~ԑ8\,$6( vpc-3ac0fb5f 123456789012ca```'UXB4fc NRDH api_activity*5metadata5product %version% %name% % vendor_name%5feature %name% %uid%5profiles %array% %version%%time5cloud %region% %provider%5api 5response %error% %message% % operation% %version%5service %name%5request %uid%5 resources5array %uid% % account_uid% %type%5actor5user  %type% %name% %uid% %uuid% % account_uid% %credential_uid%5session% created_time%mfa %issuer% % invoked_by%5idp %name%5 http_request % user_agent%5 src_endpoint %uid% %ip% %domain% % class_name%% class_uid % category_name%% category_uid% severity_id %severity% %status%% status_id % activity_name%% activity_id%type_uid % type_name%5unmapped5map %key% %value%0& %8metadataproductversionj&<1.031.03(1.031.03& %8metadataproductname&< CloudTrail CloudTrail( CloudTrail CloudTrail& %8metadataproduct vendor_name`&<AWSAWS(AWSAWS& %Hmetadataproductfeaturename&<Management, Data, and InsightsManagement, Data, and Insights(Management, Data, and InsightsManagement, Data, and Insights& 5(metadatauid&<$6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE$6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE($6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE$6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE&  %8metadataprofilesarray& <cloudcloud(cloudcloud&  %(metadataversion& < 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2& %time& <sSsS(sSsS& 5(cloudregion&< us-west-2 us-west-2( us-west-2 us-west-2& %(cloudprovider`&<AWSAWS(AWSAWS& 58apiresponseerror6^&<6& 58apiresponsemessage6^&<6& 5(api operation&<CreateLoadBalancerCreateLoadBalancer(CreateLoadBalancerCreateLoadBalancer& 5(apiversion&< 2015-12-01 2015-12-01( 2015-12-01 2015-12-01& 58apiservicename&<"elasticloadbalancing.amazonaws.com"elasticloadbalancing.amazonaws.com("elasticloadbalancing.amazonaws.com"elasticloadbalancing.amazonaws.com& 58apirequestuid&<$b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE$b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE($b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE$b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE& %8 resourcesarrayuidDd&<6& %8 resourcesarray account_uidDd&<6&  %8 resourcesarraytypeDd& <6&  58actorusertype& <IAMUserIAMUser(IAMUserIAMUser&" 58actorusername&"<AliceAlice(AliceAlice&# 58actoruseruid&#< 123456789012 123456789012( 123456789012 123456789012&% 58actoruseruuid&%<$arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alice($arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alice&) 58actoruser account_uid&)< 123456789012 123456789012( 123456789012 123456789012&* 58actorusercredential_uid&*<AKIAIOSFODNN7EXAMPLEAKIAIOSFODNN7EXAMPLE(AKIAIOSFODNN7EXAMPLEAKIAIOSFODNN7EXAMPLE&-58actorsession created_time6^&-<6&.58actorsessionmfa6^&.<6&. 58actorsessionissuer6^&.<6&/ 5(actor invoked_by6^&/<6&0 58actoridpname6^&0<6&1 5( http_request user_agent&1<5aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.15aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.1(5aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.15aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.1&6 5( src_endpointuid6^&6<6&6 5( src_endpointip&6< 198.51.100.1 198.51.100.1( 198.51.100.1 198.51.100.1&8 5( src_endpointdomain6^&8<6&9 % class_name&9< API Activity API Activity( API Activity API Activity&;% class_uidb&;<  (  &< % category_name&<<Audit ActivityAudit Activity(Audit ActivityAudit Activity&>% category_uidb&><(&?% severity_idb&?<(&@ %severity&@< Informational Informational( Informational Informational&B 5status&B<SuccessSuccess(SuccessSuccess&C5 status_idn&C<(&D % activity_name~&D<CreateCreate(CreateCreate&E% activity_idb&E<(&G%type_uidb&G<ՕՕ(ՕՕ&H % type_name&H<API Activity: CreateAPI Activity: Create(API Activity: CreateAPI Activity: Create&J %8unmappedmapkey$ &J<6(&responseElements.loadBalancers[].vpcId eventType&O %8unmappedmapvalue$&O<6( vpc-3ac0fb5f 123456789012,Q,parquet.avro.schema{"type":"record","name":"api_activity","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"vendor_name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}}]}},{"name":"uid","type":["null","string"],"default":null},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"region","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"api","type":{"type":"record","name":"api_record","fields":[{"name":"response","type":{"type":"record","name":"apiresponse_record","fields":[{"name":"error","type":["null","string"],"default":null},{"name":"message","type":["null","string"],"default":null}]}},{"name":"operation","type":["null","string"],"default":null},{"name":"version","type":["null","string"],"default":null},{"name":"service","type":{"type":"record","name":"apiservice_record","fields":[{"name":"name","type":["null","string"],"default":null}]}},{"name":"request","type":{"type":"record","name":"apirequest_record","fields":[{"name":"uid","type":["null","string"],"default":null}]}}]}},{"name":"resources","type":["null",{"type":"array","items":{"type":"record","name":"resources","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"type","type":["null","string"],"default":null}]}}]},{"name":"actor","type":{"type":"record","name":"actor_record","fields":[{"name":"user","type":{"type":"record","name":"actoruser_record","fields":[{"name":"type","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"credential_uid","type":["null","string"],"default":null}]}},{"name":"session","type":{"type":"record","name":"actorsession_record","fields":[{"name":"created_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"issuer","type":["null","string"],"default":null}]}},{"name":"invoked_by","type":["null","string"],"default":null},{"name":"idp","type":{"type":"record","name":"actoridp_record","fields":[{"name":"name","type":["null","string"],"default":null}]}}]}},{"name":"http_request","type":{"type":"record","name":"http_request_record","fields":[{"name":"user_agent","type":["null","string"],"default":null}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"domain","type":["null","string"],"default":null}]}},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"status","type":["null","string"],"default":null},{"name":"status_id","type":["null","int"],"default":null},{"name":"activity_name","type":"string"},{"name":"activity_id","type":"int"},{"name":"type_uid","type":"int"},{"name":"type_name","type":"string"},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber})0L'PAR1