{"eventVersion":"1.09","userIdentity":{"type":"AssumedRole","principalId":"AROAI4TSRELAFLOMQOMX6:TrustedAdvisor_733177541390_44e434ee-5ea3-4e8c-a766-3802fc850229","arn":"arn:aws:sts::733177541390:assumed-role/AWSServiceRoleForTrustedAdvisor/TrustedAdvisor_733177541390_44e434ee-5ea3-4e8c-a766-3802fc850229","accountId":"733177541390","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROAI4TSRELAFLOMQOMX6","arn":"arn:aws:iam::733177541390:role/aws-service-role/45.197.32.151/AWSServiceRoleForTrustedAdvisor","accountId":"733177541390","userName":"AWSServiceRoleForTrustedAdvisor"},"attributes":{"creationDate":"2024-07-31T23:59:54Z","mfaAuthenticated":"false"}},"invokedBy":"45.197.32.151"},"eventTime":"2024-07-31T23:59:54Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeSnapshots","awsRegion":"us-east-2","sourceIPAddress":"45.197.32.151","userAgent":"45.197.32.151","requestParameters":{"maxResults":1000,"snapshotSet":{},"ownersSet":{"items":[{"owner":"733177541390"}]},"sharedUsersSet":{},"filterSet":{"items":[{"name":"status","valueSet":{"items":[{"value":"completed"}]}},{"name":"owner-id","valueSet":{"items":[{"value":"733177541390"}]}}]}},"responseElements":null,"requestID":"c09eacb5-b75b-4327-b44a-49b83c1cd195","eventID":"fcf77342-a305-4b99-aec6-ab4cf82e10c7","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"733177541390","eventCategory":"Management"}
This is a syslog message from a product called aws_cloud_trail by aws_cloud_trail. The following fields were extracted from the message:
clientIP: 45.197.32.151
fieldExtractorName: aws_cloud_trail
messageType: audit_log
ruleCategory: AwsApiCall
ruleName: DescribeSnapshots
senderHost: 733177541390_CloudTrail_us-east-1
sensitivity: normal
sourceInfo: unknown
streamName: aws_cloud_trail
tags: ['us-east-2', 'aws_cloud_trail', 'audit_log']
vendorCode: ec2.amazonaws.com