PAR18,1.081.08(1.081.08ca``03ЫhlD, CloudTrail CloudTrail( CloudTrail CloudTrailb``p/M )J0#]6,AWSAWS(AWSAWScf``p DD, Management Management( Management Managementb``MKLOM+]\,$fed06f42-cb12-4764-8c69-121063dc79b9$fed06f42-cb12-4764-8c69-121063dc79b9($fed06f42-cb12-4764-8c69-121063dc79b9$fed06f42-cb12-4764-8c69-121063dc79b9cb```fTi)fi&FIF&f&fFf)I.,J,cloudcloud(cloudcloudcb```B sKSG,D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 8,}[b}[b(}[b}[bP܏&J, us-east-1 us-east-1( us-east-1 us-east-1cb```fź%S746,AWSAWS(AWSAWScf``p D 4,6cb```fkS' 4,6cb```fkS',P, ConsoleLogin ConsoleLogin( ConsoleLogin ConsoleLogincb```fy9>yh~ 4,6cb```fkS'<`,signin.amazonaws.comsignin.amazonaws.com(signin.amazonaws.comsignin.amazonaws.comcb```fřyyzUyz<,''''(''''cb```fd ,Mhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=trueMhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=true(Mhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=trueMhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=truecb```f%%Vy9zzUyz0aTĒTی ǢbU#cҒTےT$M&W"F,IAMUserIAMUser(IAMUserIAMUsercb```fdũEB,anayaanaya(anayaanayacb```fdy>b,AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLE(AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLEcb```f.ήafF>F.\x,$arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anaya($arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anayacb```fTEyVVVV@`@`UZZX; .,H, 111122223333 111122223333( 111122223333 111122223333cb```f@`@2'q 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS' 4,6cb```fkS',xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36(xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36cb```fU99z əy% y%9 @`CxCx3Mǂ$}Scs=c3 o_T|M猢T}3s==ccK3=KKĴĢL.- 4,6cb```fkS'&H, 192.0.2.0 192.0.2.0( 192.0.2.0 192.0.2.0cb```fFzz@ vj4 4,6cb```fkS'$L,AuthenticationAuthentication(AuthenticationAuthenticationc``p,-H+LN,&]0,  (  _$L,Audit ActivityAudit Activity(Audit ActivityAudit Activityc``p,M,QpL.,,:H0,(cf``p30,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@>b,AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLE(AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLEcb```f.ήafF>F.\x,$arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anaya($arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anayacb```fTEyVVVV@`@`UZZX; . 4,6cb```fkS':,LogonLogon(LogonLogonce``On/W 0,(cd``y0,([9\Q2Z,Authentication: LogonAuthentication: Logon(Authentication: LogonAuthentication: Logone``p,-H+LN,ϳRO\"F,SuccessSuccess(SuccessSuccesscb```fdɩmV/8,(cb```fd07 6,(cb```fdqf,6(recipientAccountId!additionalEventData.MFAIdentifiercb```cTbJJfIf~^bkYj^KbIo~RfNjXjQ1P"7G '3-3H(59 (☜_W Mi,HyH=z,6(Karn:aws:iam::111122223333:u2f/user/anaya/default-AAAAAAAABBBBBBBBCCCCCCCCDD 111122223333cb```c_7L,ʳJ,/L̵2# 0R4"ļDԴҜ]G(pg(pqlX^윟WV÷FHauthentication.5metadata5product %version% %name% % vendor_name%5feature %name% %uid%5profiles %array% %version%%time5cloud %region% %provider%5api 5response %error% %message% % operation% %version%5service %name%5request %uid%5 dst_endpoint %svc_name%5actor5user  %type% %name% %uid% %uuid% % account_uid% %credential_uid%5session% created_time%mfa %issuer% % invoked_by%5idp %name%5 http_request % user_agent%5 src_endpoint %uid% %ip% %domain% % class_name%% class_uid % category_name%% category_uid% severity_id %severity%5user %uid% %uuid% %name% % activity_name%% activity_id%type_uid % type_name% %status%% status_id%mfa5unmapped5map %key% %value%2& %8metadataproductversionj&<1.081.08(1.081.08& %8metadataproductname&< CloudTrail CloudTrail( CloudTrail CloudTrail& %8metadataproduct vendor_name`&<AWSAWS(AWSAWS& %Hmetadataproductfeaturename&< Management Management( Management Management& 5(metadatauid&<$fed06f42-cb12-4764-8c69-121063dc79b9$fed06f42-cb12-4764-8c69-121063dc79b9($fed06f42-cb12-4764-8c69-121063dc79b9$fed06f42-cb12-4764-8c69-121063dc79b9&  %8metadataprofilesarray& <cloudcloud(cloudcloud&  %(metadataversion& < 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2& %time& <}[b}[b(}[b}[b&  5(cloudregion& < us-east-1 us-east-1( us-east-1 us-east-1& %(cloudprovider`&<AWSAWS(AWSAWS& 58apiresponseerror6^&<6& 58apiresponsemessage6^&<6& 5(api operation&< ConsoleLogin ConsoleLogin( ConsoleLogin ConsoleLogin& 5(apiversion6^&<6& 58apiservicename&<signin.amazonaws.comsignin.amazonaws.com(signin.amazonaws.comsignin.amazonaws.com& 58apirequestuidb&<''''(''''& 5( dst_endpointsvc_name&<Mhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=trueMhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=true(Mhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=trueMhttps://console.aws.amazon.com/console/home?state=hashArgs%23&isauthcode=true& 58actorusertype&<IAMUserIAMUser(IAMUserIAMUser&  58actorusername& <anayaanaya(anayaanaya&! 58actoruseruid&!<AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLE(AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLE&# 58actoruseruuid&#<$arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anaya($arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anaya&' 58actoruser account_uid&'< 111122223333 111122223333( 111122223333 111122223333&) 58actorusercredential_uid6^&)<6&)58actorsession created_time6^&)<6&*58actorsessionmfa6^&*<6&+ 58actorsessionissuer6^&+<6&, 5(actor invoked_by6^&,<6&, 58actoridpname6^&,<6&- 5( http_request user_agent  &-<xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36(xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36xMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36&7 5( src_endpointuid6^&7<6&8 5( src_endpointip&8< 192.0.2.0 192.0.2.0( 192.0.2.0 192.0.2.0&: 5( src_endpointdomain6^&:<6&: % class_name&:<AuthenticationAuthentication(AuthenticationAuthentication&<% class_uidb&<<  (  &= % category_name&=<Audit ActivityAudit Activity(Audit ActivityAudit Activity&?% category_uidb&?<(&@% severity_idb&@<(&A %severity&A< Informational Informational( Informational Informational&C 5(useruid&C<AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLE(AIDACKCEVSQ6C2EXAMPLEAIDACKCEVSQ6C2EXAMPLE&F 5(useruuid&F<$arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anaya($arn:aws:iam::111122223333:user/anaya$arn:aws:iam::111122223333:user/anaya&I 5(username6^&I<6&J % activity_namet&J<LogonLogon(LogonLogon&K% activity_idb&K<(&M%type_uidb&M<(&N % type_name&N<Authentication: LogonAuthentication: Logon(Authentication: LogonAuthentication: Logon&P 5status&P<SuccessSuccess(SuccessSuccess&R5 status_idn&R<(&S5mfaPx&S<(&T %8unmappedmapkey&T<6(recipientAccountId!additionalEventData.MFAIdentifier&V %8unmappedmapvalue&V<6(Karn:aws:iam::111122223333:u2f/user/anaya/default-AAAAAAAABBBBBBBBCCCCCCCCDD 111122223333M,parquet.avro.schema{"type":"record","name":"authentication","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"vendor_name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}}]}},{"name":"uid","type":["null","string"],"default":null},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"region","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"api","type":{"type":"record","name":"api_record","fields":[{"name":"response","type":{"type":"record","name":"apiresponse_record","fields":[{"name":"error","type":["null","string"],"default":null},{"name":"message","type":["null","string"],"default":null}]}},{"name":"operation","type":["null","string"],"default":null},{"name":"version","type":["null","string"],"default":null},{"name":"service","type":{"type":"record","name":"apiservice_record","fields":[{"name":"name","type":["null","string"],"default":null}]}},{"name":"request","type":{"type":"record","name":"apirequest_record","fields":[{"name":"uid","type":["null","string"],"default":null}]}}]}},{"name":"dst_endpoint","type":{"type":"record","name":"dst_endpoint_record","fields":[{"name":"svc_name","type":["null","string"],"default":null}]}},{"name":"actor","type":{"type":"record","name":"actor_record","fields":[{"name":"user","type":{"type":"record","name":"actoruser_record","fields":[{"name":"type","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null},{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"account_uid","type":["null","string"],"default":null},{"name":"credential_uid","type":["null","string"],"default":null}]}},{"name":"session","type":{"type":"record","name":"actorsession_record","fields":[{"name":"created_time","type":["null","long"],"logicalType":"timestamp-millis"},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"issuer","type":["null","string"],"default":null}]}},{"name":"invoked_by","type":["null","string"],"default":null},{"name":"idp","type":{"type":"record","name":"actoridp_record","fields":[{"name":"name","type":["null","string"],"default":null}]}}]}},{"name":"http_request","type":{"type":"record","name":"http_request_record","fields":[{"name":"user_agent","type":["null","string"],"default":null}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"domain","type":["null","string"],"default":null}]}},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"user","type":{"type":"record","name":"user_record","fields":[{"name":"uid","type":["null","string"],"default":null},{"name":"uuid","type":["null","string"],"default":null},{"name":"name","type":["null","string"],"default":null}]}},{"name":"activity_name","type":"string"},{"name":"activity_id","type":"int"},{"name":"type_uid","type":"int"},{"name":"type_name","type":"string"},{"name":"status","type":["null","string"],"default":null},{"name":"status_id","type":["null","int"],"default":null},{"name":"mfa","type":["null","boolean"],"default":null},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber})2C*PAR1