{"eventVersion":"1.08","userIdentity":{"type":"AWSAccount","principalId":"AROAWYLNJGWWG3X3UQGKR:vault-aws-plugin","accountId":"464622532012"},"eventTime":"2024-07-30T03:57:41Z","eventSource":"sts.amazonaws.com","eventName":"AssumeRole","awsRegion":"us-east-1","sourceIPAddress":"37.236.128.40","userAgent":"aws-sdk-go/1.37.19 (go1.18; linux; amd64)","requestParameters":{"roleArn":"arn:aws:iam::733177541390:role/DatadogAWSIntegrationRole","roleSessionName":"datadog-logs-archive","policy":"{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":\"*\",\"Effect\":\"Allow\",\"Resource\":\"*\"}]}","durationSeconds":3600,"externalId":"4ceb95a7b3c1421dbef7396651dc05f6"},"responseElements":{"credentials":{"accessKeyId":"ASIA2VNGJOMHJV23PJE5","sessionToken":"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","expiration":"Jul 30, 2024, 4:57:41 AM"},"assumedRoleUser":{"assumedRoleId":"AROA2VNGJOMHMRPINM32S:datadog-logs-archive","arn":"arn:aws:sts::733177541390:assumed-role/DatadogAWSIntegrationRole/datadog-logs-archive"},"packedPolicySize":4},"requestID":"24d3f44d-5562-473c-a564-a8ab219b79b8","eventID":"1f966e93-3887-3231-a350-748c8706a37b","readOnly":true,"resources":[{"accountId":"733177541390","type":"AWS::IAM::Role","ARN":"arn:aws:iam::733177541390:role/DatadogAWSIntegrationRole"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"733177541390","sharedEventID":"00a86355-bccb-4bf3-b58c-853573598e81","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","clientProvidedHostHeader":"sts.us-east-1.amazonaws.com"}}
{
    "clientIP": "37.236.128.40",
    "fieldExtractorName": "aws_cloud_trail",
    "message": "{\"eventVersion\":\"1.08\",\"userIdentity\":{\"type\":\"AWSAccount\",\"principalId\":\"AROAWYLNJGWWG3X3UQGKR:vault-aws-plugin\",\"accountId\":\"464622532012\"},\"eventTime\":\"2024-07-30T03:57:41Z\",\"eventSource\":\"sts.amazonaws.com\",\"eventName\":\"AssumeRole\",\"awsRegion\":\"us-east-1\",\"sourceIPAddress\":\"37.236.128.40\",\"userAgent\":\"aws-sdk-go/1.37.19 (go1.18; linux; amd64)\",\"requestParameters\":{\"roleArn\":\"arn:aws:iam::733177541390:role/DatadogAWSIntegrationRole\",\"roleSessionName\":\"datadog-logs-archive\",\"policy\":\"{\\\"Version\\\":\\\"2012-10-17\\\",\\\"Statement\\\":[{\\\"Action\\\":\\\"*\\\",\\\"Effect\\\":\\\"Allow\\\",\\\"Resource\\\":\\\"*\\\"}]}\",\"durationSeconds\":3600,\"externalId\":\"4ceb95a7b3c1421dbef7396651dc05f6\"},\"responseElements\":{\"credentials\":{\"accessKeyId\":\"ASIA2VNGJOMHJV23PJE5\",\"sessionToken\":\"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\",\"expiration\":\"Jul 30, 2024, 4:57:41 AM\"},\"assumedRoleUser\":{\"assumedRoleId\":\"AROA2VNGJOMHMRPINM32S:datadog-logs-archive\",\"arn\":\"arn:aws:sts::733177541390:assumed-role/DatadogAWSIntegrationRole/datadog-logs-archive\"},\"packedPolicySize\":4},\"requestID\":\"24d3f44d-5562-473c-a564-a8ab219b79b8\",\"eventID\":\"1f966e93-3887-3231-a350-748c8706a37b\",\"readOnly\":true,\"resources\":[{\"accountId\":\"733177541390\",\"type\":\"AWS::IAM::Role\",\"ARN\":\"arn:aws:iam::733177541390:role/DatadogAWSIntegrationRole\"}],\"eventType\":\"AwsApiCall\",\"managementEvent\":true,\"recipientAccountId\":\"733177541390\",\"sharedEventID\":\"00a86355-bccb-4bf3-b58c-853573598e81\",\"eventCategory\":\"Management\",\"tlsDetails\":{\"tlsVersion\":\"TLSv1.3\",\"cipherSuite\":\"TLS_AES_128_GCM_SHA256\",\"clientProvidedHostHeader\":\"sts.us-east-1.amazonaws.com\"}}",
    "messageType": "audit_log",
    "ruleCategory": "AwsApiCall",
    "ruleName": "AssumeRole",
    "senderHost": "733177541390_CloudTrail_us-east-1_2",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "aws_cloud_trail",
    "tags": [
        "us-east-1",
        "aws_cloud_trail",
        "audit_log"
    ],
    "vendorCode": "sts.amazonaws.com"
}