{"eventVersion":"1.08","userIdentity":{"type":"AWSService","invokedBy":"182.104.89.247"},"eventTime":"2024-07-31T23:59:47Z","eventSource":"sts.amazonaws.com","eventName":"AssumeRole","awsRegion":"us-east-2","sourceIPAddress":"182.104.89.247","userAgent":"182.104.89.247","requestParameters":{"roleArn":"arn:aws:iam::733177541390:role/aws-service-role/182.104.89.247/AWSServiceRoleForTrustedAdvisor","roleSessionName":"TrustedAdvisor_733177541390_a49e6981-8798-4121-a2b7-8d68039fb410","durationSeconds":900},"responseElements":{"credentials":{"accessKeyId":"ASIA2VNGJOMHBQOQK6JV","sessionToken":"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","expiration":"Aug 1, 2024, 12:14:47 AM"},"assumedRoleUser":{"assumedRoleId":"AROAI4TSRELAFLOMQOMX6:TrustedAdvisor_733177541390_a49e6981-8798-4121-a2b7-8d68039fb410","arn":"arn:aws:sts::733177541390:assumed-role/AWSServiceRoleForTrustedAdvisor/TrustedAdvisor_733177541390_a49e6981-8798-4121-a2b7-8d68039fb410"}},"requestID":"27157ae6-58cc-412f-b153-79caff02df58","eventID":"703c32a9-a4fb-3416-8508-e6c6998bda58","readOnly":true,"resources":[{"accountId":"733177541390","type":"AWS::IAM::Role","ARN":"arn:aws:iam::733177541390:role/aws-service-role/182.104.89.247/AWSServiceRoleForTrustedAdvisor"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"733177541390","sharedEventID":"f0397c2a-7509-41f1-8139-cc08c37a0f04","eventCategory":"Management"}
This is a syslog message from a product called aws_cloud_trail by aws_cloud_trail. The following fields were extracted from the message:
clientIP: 182.104.89.247
fieldExtractorName: aws_cloud_trail
messageType: audit_log
ruleCategory: AwsApiCall
ruleName: AssumeRole
senderHost: 733177541390_CloudTrail_us-east-1
sensitivity: normal
sourceInfo: unknown
streamName: aws_cloud_trail
tags: ['us-east-2', 'aws_cloud_trail', 'audit_log']
vendorCode: sts.amazonaws.com