PAR18,1.041.04(1.041.04ca``030eD, CloudTrail CloudTrail( CloudTrail CloudTrailb``p/M )J0#]6,AWSAWS(AWSAWScf``p DDl,Management, Data, and InsightsManagement, Data, and Insights(Management, Data, and InsightsManagement, Data, and Insightsc``MKLOM+QpI,IQHKQ+L()l5"\,$b7d4398e-b2f0-4faa-9c76-e2d316a8d67f$b7d4398e-b2f0-4faa-9c76-e2d316a8d67f($b7d4398e-b2f0-4faa-9c76-e2d316a8d67f$b7d4398e-b2f0-4faa-9c76-e2d316a8d67fcb```fTI)&ƖIFi&ifF)Ɔf)fiW7`.,J,cloudcloud(cloudcloudcb```B sKSG,D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 8,UU(UU{wU(# /:>&J, us-east-2 us-east-2( us-east-2 us-east-2cb```fź%FI>6,AWSAWS(AWSAWScf``p D6Z,NotFoundExceptionNotFoundException(NotFoundExceptionNotFoundExceptioncb```f~%ny)ɩ%y2$`,&Unknown api for the user: 123456789012&Unknown api for the user: 123456789012(&Unknown api for the user: 123456789012&Unknown api for the user: 123456789012cb```fTyyy  iE % ũEV F&fFۧ|0(L, UnknownAPI UnknownAPI( UnknownAPI UnknownAPIcb```fyyy 4,6cb```fkS'>b,unknown.amazonaws.comunknown.amazonaws.com(unknown.amazonaws.comunknown.amazonaws.comcb```fyyyzUyzQ 7\,$5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3$5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3($5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3$5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3cb```fT)&ffF&i溆f&)Ifii)fV.:,6cb```Bk e :,6cb```Bk e :,6cb```Bk e "F,IAMUserIAMUser(IAMUserIAMUsercb```fdũEB,AliceAlice(AliceAlicecb```fd9ɩXc2V,EX_PRINCIPAL_IDEX_PRINCIPAL_ID(EX_PRINCIPAL_IDEX_PRINCIPAL_IDcb```fA~Ξ>.Lyv\,$arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alice($arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alicecb```fTEyVVVVF&fFVũE9ɩ.,P, 123456789012 123456789012( 123456789012 123456789012cb```fF&fFpj0T,EXAMPLE_KEY_IDEXAMPLE_KEY_ID(EXAMPLE_KEY_IDEXAMPLE_KEY_IDcb```f>ޮ.]$z 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS',6aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.226aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.22(6aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.226aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.22cb```f4ź9zzF %yFzz y) I%E@u&zFF؉z@ 4,6cb```fkS'2V,205.251.233.182205.251.233.182(205.251.233.182205.251.233.182cb```fFzFzFzF< 4,6cb```fkS' H, API Activity API Activity( API Activity API Activitya``p TpL.,,H0,  (   $L,Audit ActivityAudit Activity(Audit ActivityAudit Activityc``p,M,QpL.,,:H0,(cf``p30,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@"F,FailureFailure(FailureFailurecb```fdn9E{a8,(cb```fd+ :,OtherOther(OtherOtherce``/H-ؼ%r 0,cc(ccKf``0,77(773BJ.V,API Activity: OtherAPI Activity: Other(API Activity: OtherAPI Activity: Otherf``p TpL.,,R/H-`|,6(recipientAccountId eventTypecb```fb\ B@(59 3519943(Z ,H?w0Vt,6( AwsApiCall 123456789012cb```fb\ <@Ј w,/v,tN+DH api_activity*5metadata5product %version% %name% % vendor_name%5feature %name% %uid%5profiles %array% %version%%time5cloud %region% %provider%5api 5response %error% %message% % operation% %version%5service %name%5request %uid%5 resources5array %uid% % account_uid% %type%5actor5user  %type% %name% %uid% %uuid% % account_uid% %credential_uid%5session% created_time%mfa %issuer% % invoked_by%5idp %name%5 http_request % user_agent%5 src_endpoint %uid% %ip% %domain% % class_name%% class_uid % category_name%% category_uid% severity_id %severity% %status%% status_id % activity_name%% activity_id%type_uid % type_name%5unmapped5map %key% %value%0& %8metadataproductversionj&<1.041.04(1.041.04& %8metadataproductname&< CloudTrail CloudTrail( CloudTrail CloudTrail& %8metadataproduct vendor_name`&<AWSAWS(AWSAWS& %Hmetadataproductfeaturename&<Management, Data, and InsightsManagement, Data, and Insights(Management, Data, and InsightsManagement, Data, and Insights& 5(metadatauid&<$b7d4398e-b2f0-4faa-9c76-e2d316a8d67f$b7d4398e-b2f0-4faa-9c76-e2d316a8d67f($b7d4398e-b2f0-4faa-9c76-e2d316a8d67f$b7d4398e-b2f0-4faa-9c76-e2d316a8d67f&  %8metadataprofilesarray& <cloudcloud(cloudcloud&  %(metadataversion& < 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2& %time& <UU(UU& 5(cloudregion&< us-east-2 us-east-2( us-east-2 us-east-2& %(cloudprovider`&<AWSAWS(AWSAWS& 58apiresponseerror&<NotFoundExceptionNotFoundException(NotFoundExceptionNotFoundException& 58apiresponsemessage&<&Unknown api for the user: 123456789012&Unknown api for the user: 123456789012(&Unknown api for the user: 123456789012&Unknown api for the user: 123456789012& 5(api operation&< UnknownAPI UnknownAPI( UnknownAPI UnknownAPI& 5(apiversion6^&<6& 58apiservicename&<unknown.amazonaws.comunknown.amazonaws.com(unknown.amazonaws.comunknown.amazonaws.com& 58apirequestuid&<$5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3$5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3($5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3$5d40662a-49f7-11e6-97e4-d9cb6ff7d6a3&  %8 resourcesarrayuidDd& <6&! %8 resourcesarray account_uidDd&!<6&" %8 resourcesarraytypeDd&"<6&" 58actorusertype&"<IAMUserIAMUser(IAMUserIAMUser&$ 58actorusername&$<AliceAlice(AliceAlice&% 58actoruseruid&%<EX_PRINCIPAL_IDEX_PRINCIPAL_ID(EX_PRINCIPAL_IDEX_PRINCIPAL_ID&' 58actoruseruuid&'<$arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alice($arn:aws:iam::123456789012:user/Alice$arn:aws:iam::123456789012:user/Alice&+ 58actoruser account_uid&+< 123456789012 123456789012( 123456789012 123456789012&- 58actorusercredential_uid&-<EXAMPLE_KEY_IDEXAMPLE_KEY_ID(EXAMPLE_KEY_IDEXAMPLE_KEY_ID&/58actorsession created_time6^&/<6&/58actorsessionmfa6^&/<6&0 58actorsessionissuer6^&0<6&1 5(actor invoked_by6^&1<6&2 58actoridpname6^&2<6&2 5( http_request user_agent&2<6aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.226aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.22(6aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.226aws-cli/1.10.32 Python/2.7.9 Windows/7 botocore/1.4.22&7 5( src_endpointuid6^&7<6&8 5( src_endpointip&8<205.251.233.182205.251.233.182(205.251.233.182205.251.233.182&: 5( src_endpointdomain6^&:<6&; % class_name&;< API Activity API Activity( API Activity API Activity&=% class_uidb&=<  (  &> % category_name&><Audit ActivityAudit Activity(Audit ActivityAudit Activity&@% category_uidb&@<(&A% severity_idb&A<(&B %severity&B< Informational Informational( Informational Informational&D 5status&D<FailureFailure(FailureFailure&E5 status_idn&E<(&F % activity_namet&F<OtherOther(OtherOther&H% activity_idb&H<cc(cc&I%type_uidb&I<77(77&J % type_name&J<API Activity: OtherAPI Activity: Other(API Activity: OtherAPI Activity: Other&L %8unmappedmapkey&L<6(recipientAccountId eventType&N %8unmappedmapvalue&N<6( AwsApiCall 123456789012A,parquet.avro.schema{"type":"record","name":"api_activity","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"vendor_name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}}]}},{"name":"uid","type":["null","string"],"default":null},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"region","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"api","type":{"type":"record","name":"api_record","fields":[{"name":"response","type":{"type":"record","name":"apiresponse_record","fields":[{"name":"error","type":["null","string"],"default":null},{"name":"message","type":["null","string"],"default":null}]}},{"name":"operation","type":["null","string"],"default":null},{"name":"version","type":["null","string"],"default":null},{"name":"service","type":{"type":"record","name":"apiservice_record","fields":[{"name":"name","type":["null","string"],"default":null}]}},{"name":"request","type":{"type":"record","name":"apirequest_record","fields":[{"name":"uid","type":["null","string"],"default":null}]}}]}},{"name":"resources","type":["null",{"type":"array","items":{"type":"record","name":"resources","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"type","type":["null","string"],"default":null}]}}]},{"name":"actor","type":{"type":"record","name":"actor_record","fields":[{"name":"user","type":{"type":"record","name":"actoruser_record","fields":[{"name":"type","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"credential_uid","type":["null","string"],"default":null}]}},{"name":"session","type":{"type":"record","name":"actorsession_record","fields":[{"name":"created_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"issuer","type":["null","string"],"default":null}]}},{"name":"invoked_by","type":["null","string"],"default":null},{"name":"idp","type":{"type":"record","name":"actoridp_record","fields":[{"name":"name","type":["null","string"],"default":null}]}}]}},{"name":"http_request","type":{"type":"record","name":"http_request_record","fields":[{"name":"user_agent","type":["null","string"],"default":null}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"domain","type":["null","string"],"default":null}]}},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"status","type":["null","string"],"default":null},{"name":"status_id","type":["null","int"],"default":null},{"name":"activity_name","type":"string"},{"name":"activity_id","type":"int"},{"name":"type_uid","type":"int"},{"name":"type_name","type":"string"},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber})0'PAR1