CloudTrailEventFormat#

The format of the data stored in Event (as JSON) in the CloudTrailEvent field.

Contents#

  • additionalEventData — Additional event data. This field stores neither request parameters nor request results.

    • Type: Dict

  • errorCode — API error code. Events has this field only if they describe API calls that returned an error.

    • Type: String

  • errorMessage — A detailed error message. Events has this field only if they describe API calls that returned an error.

    • Type: String

  • eventID — The ID of the event.

    • Type: String

  • eventName — The name of the event. Coincides with the name of the described API method.

    • Type: String

  • eventTime — The timestamp when the event was created.

    • Type: String in ISO 8601 format

    • Example: 2016-04-14T16:02:55Z

  • eventType — The type of the event.

    • Type: String

    • Valid values: AwsApiCall | AwsConsoleSignIn | AwsConsoleSignOut | AwsConsoleAutoSignOut

  • project — The ID of the project from which the API method was called.

    • Type: String

  • readOnly — Indicates whether the event is a write or read event.

    • Type: Boolean

  • recipientAccountId — The name of the customer.

    • Type: String

  • requestID — The ID of the request, which the event describes.

    • Type: String

  • requestParameters — The parameters that were specified in the API method request.

    • Type: Dict

  • responseElements — The result of API method execution. This field is always empty for ReadOnly methods.

    • Type: Dict

  • sourceIPAddress — IP address, from which the request was sent. The field is not blank only for web interface session creation/deletion events.

    • Type: String

  • userName — The user name of the requester that called the API method.

    • Type: String