{"eventVersion":"1.09","userIdentity":{"type":"AssumedRole","principalId":"AROA2VNGJOMHOMLAXJS4G:datadog-forwarder-nvishrdprd","arn":"arn:aws:sts::733177541390:assumed-role/datadog-forwarder-nvishrdprd-ForwarderRole-1N3HO43N8VBJ/datadog-forwarder-nvishrdprd","accountId":"733177541390","accessKeyId":"ASIA2VNGJOMHL2ZEUYZZ","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROA2VNGJOMHOMLAXJS4G","arn":"arn:aws:iam::733177541390:role/datadog-forwarder-nvishrdprd-ForwarderRole-1N3HO43N8VBJ","accountId":"733177541390","userName":"datadog-forwarder-nvishrdprd-ForwarderRole-1N3HO43N8VBJ"},"attributes":{"creationDate":"2024-08-01T04:37:00Z","mfaAuthenticated":"false"}},"invokedBy":"46.35.176.4"},"eventTime":"2024-08-01T05:05:04Z","eventSource":"kms.amazonaws.com","eventName":"Decrypt","awsRegion":"us-east-1","sourceIPAddress":"46.35.176.4","userAgent":"46.35.176.4","requestParameters":{"encryptionContext":{"aws:s3:arn":"arn:aws:s3:::datadog-forwarder-nvishrdprd-forwarderbucket-fn7pn2w9gpwx/e79f2b65ccf6682159c6ee0f4f8269679d5769c8_s3-coscorpe.json"},"encryptionAlgorithm":"SYMMETRIC_DEFAULT"},"responseElements":null,"requestID":"1ec8fd4a-5d05-4c51-b4c8-de92c42021a2","eventID":"25633b3b-9658-4a4f-95f3-821db8168dbf","readOnly":true,"resources":[{"accountId":"733177541390","type":"AWS::KMS::Key","ARN":"arn:aws:kms:us-east-1:733177541390:key/1d2d903e-f686-4fcc-9150-a4d223e4c24b"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"733177541390","eventCategory":"Management"}
{
    "clientIP": "46.35.176.4",
    "fieldExtractorName": "aws_cloud_trail",
    "message": "{\"eventVersion\":\"1.09\",\"userIdentity\":{\"type\":\"AssumedRole\",\"principalId\":\"AROA2VNGJOMHOMLAXJS4G:datadog-forwarder-nvishrdprd\",\"arn\":\"arn:aws:sts::733177541390:assumed-role/datadog-forwarder-nvishrdprd-ForwarderRole-1N3HO43N8VBJ/datadog-forwarder-nvishrdprd\",\"accountId\":\"733177541390\",\"accessKeyId\":\"ASIA2VNGJOMHL2ZEUYZZ\",\"sessionContext\":{\"sessionIssuer\":{\"type\":\"Role\",\"principalId\":\"AROA2VNGJOMHOMLAXJS4G\",\"arn\":\"arn:aws:iam::733177541390:role/datadog-forwarder-nvishrdprd-ForwarderRole-1N3HO43N8VBJ\",\"accountId\":\"733177541390\",\"userName\":\"datadog-forwarder-nvishrdprd-ForwarderRole-1N3HO43N8VBJ\"},\"attributes\":{\"creationDate\":\"2024-08-01T04:37:00Z\",\"mfaAuthenticated\":\"false\"}},\"invokedBy\":\"46.35.176.4\"},\"eventTime\":\"2024-08-01T05:05:04Z\",\"eventSource\":\"kms.amazonaws.com\",\"eventName\":\"Decrypt\",\"awsRegion\":\"us-east-1\",\"sourceIPAddress\":\"46.35.176.4\",\"userAgent\":\"46.35.176.4\",\"requestParameters\":{\"encryptionContext\":{\"aws:s3:arn\":\"arn:aws:s3:::datadog-forwarder-nvishrdprd-forwarderbucket-fn7pn2w9gpwx/e79f2b65ccf6682159c6ee0f4f8269679d5769c8_s3-coscorpe.json\"},\"encryptionAlgorithm\":\"SYMMETRIC_DEFAULT\"},\"responseElements\":null,\"requestID\":\"1ec8fd4a-5d05-4c51-b4c8-de92c42021a2\",\"eventID\":\"25633b3b-9658-4a4f-95f3-821db8168dbf\",\"readOnly\":true,\"resources\":[{\"accountId\":\"733177541390\",\"type\":\"AWS::KMS::Key\",\"ARN\":\"arn:aws:kms:us-east-1:733177541390:key/1d2d903e-f686-4fcc-9150-a4d223e4c24b\"}],\"eventType\":\"AwsApiCall\",\"managementEvent\":true,\"recipientAccountId\":\"733177541390\",\"eventCategory\":\"Management\"}",
    "messageType": "audit_log",
    "ruleCategory": "AwsApiCall",
    "ruleName": "Decrypt",
    "senderHost": "733177541390_CloudTrail_us-east-1_3",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "aws_cloud_trail",
    "tags": [
        "us-east-1",
        "aws_cloud_trail",
        "audit_log"
    ],
    "vendorCode": "kms.amazonaws.com"
}