PAR18,1.071.07(1.071.07ca``030AD, CloudTrail CloudTrail( CloudTrail CloudTrailb``p/M )J0#]6,AWSAWS(AWSAWScf``p DD, Management Management( Management Managementb``MKLOM+]\v,$dEXAMPLE-265a-41e0-9352-4401bEXAMPLE$dEXAMPLE-265a-41e0-9352-4401bEXAMPLE($dEXAMPLE-265a-41e0-9352-4401bEXAMPLE$dEXAMPLE-265a-41e0-9352-4401bEXAMPLEcb```fT)>Ff&ƦF&&IP9?.,J,cloudcloud(cloudcloudcb```B sKSG,D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 8,` d(n` d(n(` d(n` d(nKMcd`l&J, us-east-2 us-east-2( us-east-2 us-east-2cb```fź%FI>6,AWSAWS(AWSAWScf``p D 4,6cb```fkS' 4,6cb```fkS'8\,AssumeRoleWithSAMLAssumeRoleWithSAML(AssumeRoleWithSAMLAssumeRoleWithSAMLcb```fťA9%>閌j 4,6cb```fkS'6Z,sts.amazonaws.comsts.amazonaws.com(sts.amazonaws.comsts.amazonaws.comcb```f%zUyzR\v,$6EXAMPLE-e595-11e5-b2c7-c974fEXAMPLE$6EXAMPLE-e595-11e5-b2c7-c974fEXAMPLE($6EXAMPLE-e595-11e5-b2c7-c974fEXAMPLE$6EXAMPLE-e595-11e5-b2c7-c974fEXAMPLEcb```fTf>IFɖ&iP9Ə. 4,6cb```fkS'$H,SAMLUserSAMLUser(SAMLUserSAMLUsercb```f>ũE*N, SamlExample SamlExample( SamlExample SamlExamplecb```f99 Odv,(SampleUkh1i4+ExamplexL/jEvs=:SamlExample(SampleUkh1i4+ExamplexL/jEvs=:SamlExample((SampleUkh1i4+ExamplexL/jEvs=:SamlExample(SampleUkh1i4+ExamplexL/jEvs=:SamlExamplecb```f9&ڮ`^~kYP2*2 2 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS'Jn,bdGOnTesti4+ExamplexL/jEvs=bdGOnTesti4+ExamplexL/jEvs=(bdGOnTesti4+ExamplexL/jEvs=bdGOnTesti4+ExamplexL/jEvs=cb```fI)y!%&ڮ9>YeŶi%,]aws-cli/1.16.263 Python/3.4.7 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 botocore/1.12.253]aws-cli/1.16.263 Python/3.4.7 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 botocore/1.12.253(]aws-cli/1.16.263 Python/3.4.7 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 botocore/1.12.253]aws-cli/1.16.263 Python/3.4.7 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 botocore/1.12.253A 0д^$Ǚ1(% 5|OTx]c+<9#ht7-i,ZeB`-C3bZ;cp-}g 4,6cb```fkS'*N, 192.0.2.101 192.0.2.101( 192.0.2.101 192.0.2.101cb```fFzzFzF 4,6cb```fkS'$L,AuthenticationAuthentication(AuthenticationAuthenticationc``p,-H+LN,&]0,  (  _$L,Audit ActivityAudit Activity(Audit ActivityAudit Activityc``p,M,QpL.,,:H0,(cf``p30,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@ 4,6cb```fkS'~,5arn:aws:iam::444455556666:role/SAMLTestRoleShibboleth5arn:aws:iam::444455556666:role/SAMLTestRoleShibboleth(5arn:aws:iam::444455556666:role/SAMLTestRoleShibboleth5arn:aws:iam::444455556666:role/SAMLTestRoleShibbolethcb```f4EyVVVV&@` f@`UZ\gd&% ,5(?Fh,MyAssignedRoleSessionNameMyAssignedRoleSessionName(MyAssignedRoleSessionNameMyAssignedRoleSessionNamecb```fřy)A9@N~_bn*L#:,LogonLogon(LogonLogonce``On/W 0,(cd``y0,([9\Q2Z,Authentication: LogonAuthentication: Logon(Authentication: LogonAuthentication: Logone``p,-H+LN,ϳRO\B,OtherOther(OtherOthercb```fd%E?Y8,(cb```f U\  4,6cb```fkS' ,06(responseElements.subjectType eventTypeRMK@Ջ'ED+(UZj'ƙb8I)bX^6̛7FYuyˉxPM)):mKUꝒ|tB(һ۔wpQuu`k=nSj0/yUi $Bwci؞}@ .PP>5Uk!2Z ߆ EY)VuA3<@ZwigYE#v ,a_̀H ,06( transient3600Ro0.c{BH 4]-duU4hVrSؑuΪ;u߻v׈>es Jg523ھ;ңn,=[4{STX" 5(useruid6^&><6&? 5(useruuid&?<5arn:aws:iam::444455556666:role/SAMLTestRoleShibboleth5arn:aws:iam::444455556666:role/SAMLTestRoleShibboleth(5arn:aws:iam::444455556666:role/SAMLTestRoleShibboleth5arn:aws:iam::444455556666:role/SAMLTestRoleShibboleth&D 5(username&D<MyAssignedRoleSessionNameMyAssignedRoleSessionName(MyAssignedRoleSessionNameMyAssignedRoleSessionName&G % activity_namet&G<LogonLogon(LogonLogon&H% activity_idb&H<(&I%type_uidb&I<(&J % type_name&J<Authentication: LogonAuthentication: Logon(Authentication: LogonAuthentication: Logon&M 5status&M<OtherOther(OtherOther&N5 status_idn&N<(&O5mfa6^&O<6&P %8unmappedmapkey0&P<6(responseElements.subjectType eventType&V %8unmappedmapvalue0 &V<6( transient3600],parquet.avro.schema{"type":"record","name":"authentication","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"vendor_name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}}]}},{"name":"uid","type":["null","string"],"default":null},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"region","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"api","type":{"type":"record","name":"api_record","fields":[{"name":"response","type":{"type":"record","name":"apiresponse_record","fields":[{"name":"error","type":["null","string"],"default":null},{"name":"message","type":["null","string"],"default":null}]}},{"name":"operation","type":["null","string"],"default":null},{"name":"version","type":["null","string"],"default":null},{"name":"service","type":{"type":"record","name":"apiservice_record","fields":[{"name":"name","type":["null","string"],"default":null}]}},{"name":"request","type":{"type":"record","name":"apirequest_record","fields":[{"name":"uid","type":["null","string"],"default":null}]}}]}},{"name":"dst_endpoint","type":{"type":"record","name":"dst_endpoint_record","fields":[{"name":"svc_name","type":["null","string"],"default":null}]}},{"name":"actor","type":{"type":"record","name":"actor_record","fields":[{"name":"user","type":{"type":"record","name":"actoruser_record","fields":[{"name":"type","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"credential_uid","type":["null","string"],"default":null}]}},{"name":"session","type":{"type":"record","name":"actorsession_record","fields":[{"name":"created_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"issuer","type":["null","string"],"default":null}]}},{"name":"invoked_by","type":["null","string"],"default":null},{"name":"idp","type":{"type":"record","name":"actoridp_record","fields":[{"name":"name","type":["null","string"],"default":null}]}}]}},{"name":"http_request","type":{"type":"record","name":"http_request_record","fields":[{"name":"user_agent","type":["null","string"],"default":null}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"domain","type":["null","string"],"default":null}]}},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"user","type":{"type":"record","name":"user_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null}]}},{"name":"activity_name","type":"string"},{"name":"activity_id","type":"int"},{"name":"type_uid","type":"int"},{"name":"type_name","type":"string"},{"name":"status","type":["null","string"],"default":null},{"name":"status_id","type":["null","int"],"default":null},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber})2()PAR1