# Registro de la API de Amazon CloudWatch y operaciones de la consola con AWS CloudTrail
Amazon CloudWatch, CloudWatch Synthetics, CloudWatch RUM, las investigaciones operativas de Amazon Q Developer, el Monitor de flujo de red e Internet Monitor están integrados con AWS CloudTrail, un servicio que proporciona un registro de las acciones hechas por un usuario, rol o servicio de AWS. CloudTrail captura las llamadas a la API que se realizaron desde su cuenta AWS o en su nombre. Las llamadas capturadas incluyen las llamadas hechas desde la consola de CloudWatch, así como las llamadas de código a las operaciones de API de CloudWatch. Mediante la información recopilada por CloudTrail, puede determinar la solicitud que se hizo a CloudWatch, la dirección IP desde la que se hizo, cuándo se hizo y detalles adicionales.
Cada entrada de registro o evento contiene información sobre quién generó la solicitud. La información de identidad del usuario le ayuda a determinar lo siguiente:
+ Si la solicitud se realizó con las credenciales del usuario raíz o del usuario.
+ Si la solicitud se realizó en nombre de un usuario de IAM Identity Center.
+ Si la solicitud se realizó con credenciales de seguridad temporales de un rol o fue un usuario federado.
+ Si la solicitud la realizó otro Servicio de AWS.
CloudTrail está activado en la Cuenta de AWS cuando usted crea la cuenta y tiene acceso automático al **Historial de eventos** de CloudTrail. El **Historial de eventos** de CloudTrail proporciona un registro visible e inmutable, que se puede buscar y descargar, de los últimos 90 días de eventos de gestión registrados en una Región de AWS. Para obtener más información, consulte [Trabajar con el historial de eventos de CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html) en la *Guía del usuario de AWS CloudTrail*. No se cobran cargos de CloudTrail por ver el **Historial de eventos**.
Para mantener un registro permanente de los eventos en su Cuenta de AWS más allá de los 90 días, cree un registro de seguimiento o un almacén de datos de eventos de [CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html).
**Registros de seguimiento de CloudTrail**
Un *registro de seguimiento* permite a CloudTrail enviar archivos de registro a un bucket de Amazon S3. Todos los registros de seguimiento que cree con la Consola de administración de AWS son multirregionales. Puede crear un registro de seguimiento de una sola región o multirregionales mediante la AWS CLI. Se recomienda crear un registro de seguimiento multirregional, ya que registra actividad en todas las Regiones de AWS de su cuenta. Si crea un registro de seguimiento de una sola región, solo podrá ver los eventos registrados en la Región de AWS del registro de seguimiento. Para obtener más información acerca de los registros de seguimiento, consulte [Creación de un registro de seguimiento para su Cuenta de AWS](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trail.html) y [Creación de un registro de seguimiento para una organización](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html) en la *Guía del usuario de AWS CloudTrail*.
Puede crear un registro de seguimiento para enviar una copia de los eventos de administración en curso en su bucket de Amazon S3 sin costo alguno desde CloudTrail; sin embargo, hay cargos por almacenamiento en Amazon S3. Para obtener más información sobre los precios de CloudTrail, consulte [Precios de AWS CloudTrail](https://aws.amazon.com/cloudtrail/pricing/). Para obtener información acerca de los precios de Amazon S3, consulte [Precios de Amazon S3](https://aws.amazon.com/s3/pricing/).
**Almacenes de datos de eventos de CloudTrail Lake**
*CloudTrail Lake* le permite ejecutar consultas basadas en SQL sobre los eventos. CloudTrail Lake convierte los eventos existentes en formato JSON basado en filas al formato [ORC de Apache](https://orc.apache.org/). ORC es un formato de almacenamiento en columnas optimizado para una recuperación rápida de datos. Los eventos se agregan en *almacenes de datos de eventos*, que son recopilaciones inmutables de eventos en función de criterios que se seleccionan aplicando [selectores de eventos avanzados](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-concepts.html#adv-event-selectors). Los selectores que se aplican a un almacén de datos de eventos controlan los eventos que perduran y están disponibles para la consulta. Para obtener más información acerca de CloudTrail Lake, consulte [Trabajar con AWS CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) en la *Guía del usuario de AWS CloudTrail*.
Los almacenes de datos de eventos de CloudTrail Lake y las consultas generan costos adicionales. Cuando crea un almacén de datos de eventos, debe elegir la [opción de precios](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html#cloudtrail-lake-manage-costs-pricing-option) que desee utilizar para él. La opción de precios determina el costo de la incorporación y el almacenamiento de los eventos, así como el período de retención predeterminado y máximo del almacén de datos de eventos. Para obtener más información sobre los precios de CloudTrail, consulte [Precios de AWS CloudTrail](https://aws.amazon.com/cloudtrail/pricing/).
**nota**
Para obtener información sobre las llamadas a la API de Registros de CloudWatch que se registran en CloudTrail, consulte la [información sobre Registros de CloudWatch en CloudTrail](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/logging_cw_api_calls_cwl.html#cwl_info_in_ct).
**Topics**
+ [Información de CloudWatch en CloudTrail](#cw_info_in_ct)
+ [Eventos de datos de CloudWatch en CloudTrail](#CloudWatch-data-plane-events)
+ [Información sobre la generación de consultas en CloudTrail](#cwl_query-generation-cloudtrail)
+ [Eventos de investigaciones operativas de Amazon Q Developer en CloudTrail](#Q-Developer-Investigations-Cloudtrail)
+ [Monitor de flujo de red de CloudTrail](#CloudWatch-NetworkFlowMonitor-info-in-ct)
+ [Eventos del plano de datos del Monitor de flujo de red en CloudTrail](#CloudWatch-NetworkFlowMonitor-data-plane-events)
+ [Internet Monitor en CloudTrail](#cw_im_info_in_ct)
+ [Información de CloudWatch Synthetics en CloudTrail](#cw_synthetics_info_in_ct)
+ [Información de CloudWatch RUM en CloudTrail](#RUM-CloudTrail)
+ [Eventos del plano de datos de CloudWatch RUM en CloudTrail](#RUM-data-plane-events)
+ [Información de Network Synthetic Monitor en CloudTrail](#cw_network_synthetic_monitor_info_in_ct)
+ [Información de CloudWatch Observability Access Manager en CloudTrail](#cw_observability_access_manager_info_in_ct)
+ [Información de CloudWatch Observability Admin en CloudTrail](#cw_observability_admin_info_in_ct)
+ [Información de CloudWatch Application Signals en CloudTrail](#cw_application_signals_info_in_ct)
+ [Detalles de Información de aplicaciones de CloudWatch en CloudTrail](#cw_application_insights_info_in_ct)
## Información de CloudWatch en CloudTrail
CloudWatch admite el registro de las siguientes acciones como eventos en archivos de registros de CloudTrail:
+ [DeleteAlarmActions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteAlarmActions.html)
+ [DeleteAnomalyDetector](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteAnomalyDetector.html)
+ [DeleteDashboards](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteDashboards.html)
+ [DeleteInsightRules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteInsightRules.html)
+ [DeleteMetricStream](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteMetricStream.html)
+ [DescribeAlarmHistory](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAlarmHistory.html)
+ [DescribeAlarms](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAlarms.html)
+ [DescribeAlarmsForMetric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAlarmsForMetric.html)
+ [DescribeAnomalyDetectors](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAnomalyDetectors.html)
+ [DescribeInsightRules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeInsightRules.html)
+ [DisableAlarmActions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DisableAlarmActions.html)
+ [DisableInsightRules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DisableInsightRules.html)
+ [EnableAlarmActions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_EnableAlarmActions.html)
+ [EnableInsightRules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_EnableInsightRules.html)
+ [GetDashboard](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetDashboard.html)
+ [GetInsightRuleReport](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetInsightRuleReport.html)
+ [GetMetricStream](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricStream.html)
+ [ListDashboards](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListDashboards.html)
+ [ListManagedInsightRules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListManagedInsightRules.html)
+ [ListMetricStreams](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetricStreams.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListTagsForResource.html)
+ [PutAnomalyDetector](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutAnomalyDetector.html)
+ [PutCompositeAlarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutCompositeAlarm.html)
+ [PutDashboard](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutDashboard.html)
+ [PutInsightRule](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutInsightRule.html)
+ [PutManagedInsightRules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutManagedInsightRules.html)
+ [PutMetricAlarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricAlarm.html)
+ [PutMetricStream](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricStream.html)
+ [SetAlarmState](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_SetAlarmState.html)
+ [StartMetricStreams](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_StartMetricStreams.html)
+ [StopMetricStreams](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_StopMetricStreams.html)
+ [TagResource](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_UntagResource.html)
### Ejemplo: Entradas de archivos de registros de CloudWatch
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail que ilustra la acción `PutMetricAlarm`.
```
{
"Records": [{
"eventVersion": "1.01",
"userIdentity": {
"type": "Root",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:root",
"accountId": "123456789012",
"accessKeyId": "EXAMPLE_KEY_ID"
},
"eventTime": "2014-03-23T21:50:34Z",
"eventSource": "monitoring.amazonaws.com",
"eventName": "PutMetricAlarm",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "aws-sdk-ruby2/2.0.0.rc4 ruby/1.9.3 x86_64-linux Seahorse/0.1.0",
"requestParameters": {
"threshold": 50.0,
"period": 60,
"metricName": "CloudTrail Test",
"evaluationPeriods": 3,
"comparisonOperator": "GreaterThanThreshold",
"namespace": "AWS/CloudWatch",
"alarmName": "CloudTrail Test Alarm",
"statistic": "Sum"
},
"responseElements": null,
"requestID": "29184022-b2d5-11e3-a63d-9b463e6d0ff0",
"eventID": "b096d5b7-dcf2-4399-998b-5a53eca76a27"
},
..additional entries
]
}
```
La siguiente entrada de archivo de registro muestra que un usuario ha llamado a la acción `PutRule` de CloudWatch Events.
```
{
"eventVersion":"1.03",
"userIdentity":{
"type":"Root",
"principalId":"123456789012",
"arn":"arn:aws:iam::123456789012:root",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"sessionContext":{
"attributes":{
"mfaAuthenticated":"false",
"creationDate":"2015-11-17T23:56:15Z"
}
}
},
"eventTime":"2015-11-18T00:11:28Z",
"eventSource":"events.amazonaws.com",
"eventName":"PutRule",
"awsRegion":"us-east-1",
"sourceIPAddress":"AWS Internal",
"userAgent":"AWS CloudWatch Console",
"requestParameters":{
"description":"",
"name":"cttest2",
"state":"ENABLED",
"eventPattern":"{\"source\":[\"aws.ec2\"],\"detail-type\":[\"EC2 Instance State-change Notification\"]}",
"scheduleExpression":""
},
"responseElements":{
"ruleArn":"arn:aws:events:us-east-1:123456789012:rule/cttest2"
},
"requestID":"e9caf887-8d88-11e5-a331-3332aa445952",
"eventID":"49d14f36-6450-44a5-a501-b0fdcdfaeb98",
"eventType":"AwsApiCall",
"apiVersion":"2015-10-07",
"recipientAccountId":"123456789012"
}
```
La siguiente entrada del archivo de registro muestra que un usuario ha llamado a la acción `CreateExportTask` de CloudWatch Logs.
```
{
"eventVersion": "1.03",
"userIdentity": {
"type": "IAMUser",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:user/someuser",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"userName": "someuser"
},
"eventTime": "2016-02-08T06:35:14Z",
"eventSource": "logs.amazonaws.com",
"eventName": "CreateExportTask",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "aws-sdk-ruby2/2.0.0.rc4 ruby/1.9.3 x86_64-linux Seahorse/0.1.0",
"requestParameters": {
"destination": "yourdestination",
"logGroupName": "yourloggroup",
"to": 123456789012,
"from": 0,
"taskName": "yourtask"
},
"responseElements": {
"taskId": "15e5e534-9548-44ab-a221-64d9d2b27b9b"
},
"requestID": "1cd74c1c-ce2e-12e6-99a9-8dbb26bd06c9",
"eventID": "fd072859-bd7c-4865-9e76-8e364e89307c",
"eventType": "AwsApiCall",
"apiVersion": "20140328",
"recipientAccountId": "123456789012"
}
```
## Eventos de datos de CloudWatch en CloudTrail
CloudTrail puede capturar las actividades de la API relacionadas con las operaciones del plano de datos de CloudWatch en las API [GetMetricData](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricData.html), [GetMetricWidgetImage](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricWidgetImage.html), [PutMetricData](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricData.html), [GetMetricStatistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricStatistics.html) y [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html) de las métricas.
Los [eventos de datos](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#logging-data-events), también conocidos como operaciones del plano de datos, brindan información sobre las operaciones de recursos que se realizan sobre un recurso o en él. Los eventos de datos suelen ser actividades de gran volumen.
De forma predeterminada, CloudTrail no registra eventos de datos. El **Historial de eventos** de CloudTrail no registra los eventos de datos.
Se aplican cargos adicionales a los eventos de datos. Para obtener más información sobre los precios de CloudTrail, consulte [Precios de AWS CloudTrail](https://aws.amazon.com/cloudtrail/pricing/).
Puede registrar eventos de datos para los tipos de recursos de CloudWatch mediante la consola de CloudTrail, la AWS CLI o las operaciones de la API de CloudTrail. Para obtener más información sobre cómo registrar los eventos de datos, consulte [Registro de eventos de datos con la Consola de administración de AWS](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#logging-data-events-console) y [Registro de eventos de datos con la AWS Command Line Interface](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#creating-data-event-selectors-with-the-AWS-CLI) en la *Guía del usuario de AWS CloudTrail*.
Los eventos del plano de datos se pueden filtrar de acuerdo al tipo de recurso. Debido a los costos adicionales por utilizar eventos de datos en CloudTrail, el filtrado por recurso permite tener un mejor control sobre lo que registra y paga.
Con la información que CloudTrail recopila, puede identificar cualquiera de las API de métricas, la dirección IP del solicitante, la identidad del solicitante y la fecha y hora de la solicitud. El registro de las API **GetMetricData**, **GetMetricWidgetImage**, **PutMetricData**, **GetMetricStatistics** y **ListMetrics** con CloudTrail ayuda a habilitar la auditoría operacional y de riesgos, la gobernanza y el cumplimiento normativo de su cuenta de AWS.
**nota**
Cuando visualiza los eventos de **GetMetricData** en CloudTrail, puede que vea más llamadas de las que inició. Esto se debe a que CloudWatch registra los eventos en CloudTrail para las acciones de **GetMetricData** iniciadas por componentes internos. Por ejemplo, verá llamadas de **GetMetricData** iniciadas en los paneles de CloudWatch para actualizar los datos del widget y llamadas de **GetMetricData** iniciadas en una cuenta de supervisión para recuperar datos de una cuenta de origen en la observabilidad entre cuentas. Estas llamadas iniciadas internamente no incurrirán en cargos de CloudWatch, pero sí cuentan como eventos registrados en CloudTrail, el cual se cobra según la cantidad de eventos registrados.
A continuación, se muestra un ejemplo de un evento de CloudTrail para una operación de **GetMetricData**.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDA2NYTR2EPCTNY7AF3L",
"arn": "arn:aws:iam::111122223333:user/admin",
"accountId": "111122223333",
"accessKeyId": "EXAMPLE1234567890",
"userName": "admin"
},
"eventTime": "2024-05-08T16:20:34Z",
"eventSource": "monitoring.amazonaws.com",
"eventName": "GetMetricData",
"awsRegion": "us-east-1",
"sourceIPAddress": "99.45.3.7",
"userAgent": "aws-cli/2.13.23 Python/3.11.5 Darwin/23.4.0 exe/x86_64 prompt/off command/cloudwatch.get-metric-data",
"requestParameters": {
"metricDataQueries": [{
"id": "e1",
"expression": "m1 / m2",
"label": "ErrorRate"
},
{
"id": "m1",
"metricStat": {
"metric": {
"namespace": "CWAgent",
"metricName": "disk_used_percent",
"dimensions": [{
"name": "LoadBalancerName",
"value": "EXAMPLE4623a5cb6a7384c5229"
}]
},
"period": 300,
"stat": "Sum",
"unit": "Count"
},
"returnData": false
},
{
"id": "m2",
"metricStat": {
"metric": {
"namespace": "CWAgent",
"metricName": "disk_used_percent",
"dimensions": [{
"name": "LoadBalancerName",
"value": "EXAMPLE4623a5cb6a7384c5229"
}]
},
"period": 300,
"stat": "Sum"
},
"returnData": true
}
],
"startTime": "Apr 19, 2024, 4:00:00 AM",
"endTime": "May 8, 2024, 4:30:00 AM"
},
"responseElements": null,
"requestID": "EXAMPLE-57ac-47d5-938c-f5917c6799d5",
"eventID": "EXAMPLE-211c-404b-b13d-36d93c8b4fbf",
"readOnly": true,
"resources": [{
"type": "AWS::CloudWatch::Metric"
}],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "111122223333",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "monitoring.us-east-1.amazonaws.com"
}
}
```
A continuación, se muestra un ejemplo de un evento de CloudTrail para una operación de **PutMetricData**.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "111122223333:example.amazon.com",
"arn": "arn:aws:sts::111122223333:assumed-role/cloudwatch.full.access/example.amazon.com",
"accountId": "111122223333",
"accessKeyId": "EXAMPLE1234567890",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROA3FLD4LJVPWYJ6BCNM",
"arn": "arn:aws:iam::111122223333:role/cloudwatch.full.access",
"accountId": "111122223333",
"userName": "cloudwatch.full.access"
},
"attributes": {
"creationDate": "2025-06-19T23:19:50Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-06-19T23:51:04Z",
"eventSource": "monitoring.amazonaws.com",
"eventName": "PutMetricData",
"awsRegion": "us-east-1",
"sourceIPAddress": "AWS Internal",
"userAgent": "AWS Internal",
"requestParameters": {
"namespace": "CloudTrailTests",
"metricData": [
{
"metricName": "CloudTrailPutMetricDataTest",
"dimensions": [
{
"name": "TestDimName",
"value": "TestDimValue"
}
]
}
]
},
"responseElements": null,
"requestID": "877db913-2620-4929-97f3-f3c93c6f689b",
"eventID": "0c0c4516-75f4-4b27-8a83-213821a96a2b",
"readOnly": false,
"resources": [
{
"type": "AWS::CloudWatch::Metric"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "111122223333",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "monitoring.us-east-1.amazonaws.com"
}
}
```
## Información sobre la generación de consultas en CloudTrail
También es compatible con el registro de CloudTrail para los eventos de la consola de generación de consultas. En la actualidad, el generador de consultas es compatible con Información de métricas de CloudWatch e Información de registros de CloudWatch. En estos eventos de CloudTrail, el `eventSource` es `monitoring.amazonaws.com`.
A continuación, se muestra un ejemplo de una entrada de registro de CloudTrail que demuestra la acción **GenerateQuery** en Información de métricas de CloudWatch.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:assumed-role/role_name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111222333444:role/Administrator",
"accountId": "123456789012",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2020-04-08T21:43:24Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2020-04-08T23:06:30Z",
"eventSource": "monitoring.amazonaws.com",
"eventName": "GenerateQuery",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "exampleUserAgent",
"requestParameters": {
"query_ask": "***",
"query_type": "MetricsInsights",
"metrics_insights": {
"aws_namespaces": [
"AWS/S3",
"AWS/Lambda",
"AWS/DynamoDB"
]
},
"include_description": true
},
"responseElements": null,
"requestID": "2f56318c-cfbd-4b60-9d93-1234567890",
"eventID": "52723fd9-4a54-478c-ac55-1234567890",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
## Eventos de investigaciones operativas de Amazon Q Developer en CloudTrail
Las investigaciones operativas de Amazon Q Developer admiten el registro de las siguientes acciones como eventos en archivos de registro de CloudTrail.
+ [CreateInvestigationGroup](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_CreateInvestigationGroup.html)
+ [GetInvestigationGroup](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_GetInvestigationGroup.html)
+ [DeleteInvestigationGroup](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_DeleteInvestigationGroup.html)
+ [ListInvestigationGroup](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_ListInvestigationGroups.html)
+ [PutInvestigationGroupPolicy](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_PutInvestigationGroupPolicy.html)
+ [DeleteInvestigationGroupPolicy](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_DeleteInvestigationGroupPolicy.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_ListTagsForResource.html)
+ [GetInvestigationGroupPolicy](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_GetInvestigationGroupPolicy.html)
+ [TagResource](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_UntagResource.html)
+ [UpdateInvestigationGroup](https://docs.aws.amazon.com/cloudwatchinvestigations/latest/APIReference/API_UpdateInvestigationGroup.html)
### Ejemplo: entradas en el archivo de registro de las investigaciones operativas de Amazon Q Developer
En el siguiente ejemplo, se muestra una entrada en el registro de las investigaciones operativas de Amazon Q Developer que ilustra la acción `CreateInvestigationGroup`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:assumed-role/role_name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:role/role_name",
"accountId": "123456789012",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-10-30T18:42:05Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-10-30T18:48:26Z",
"eventSource": "aiops.amazonaws.com",
"eventName": "CreateInvestigationGroup",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "exampleUserAgent",
"requestParameters": {
"name": "exampleName",
"roleArn": "arn:aws:iam::123456789012:role/role_name" },
"responseElements": {
"arn": "arn:aws:aiops:us-east-1:123456789012:investigation-group/021345abcdef67890"
},
"requestId": "e9caf887-8d88-11e5-a331-3332aa445952",
"requestId": "49d14f36-6450-44a5-a501-b0fdcdfaeb98",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management"
}
```
En el siguiente ejemplo, se muestra una entrada en el registro de las investigaciones operativas de Amazon Q Developer que ilustra la acción `CreateInvestigationEvent`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:sts::123456789012:assumed-role/role_name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:role/role_name",
"accountId": "123456789012",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-10-30T16:17:49Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-10-30T16:35:34Z",
"eventSource": "aiops.amazonaws.com",
"eventName": "CreateInvestigationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "exampleUserAgent",
"requestParameters": {
"identifier": "arn:aws:aiops:us-east-1:123456789012:investigation-group/021345abcdef67890",
"investigationId": "bcdef01234567890",
"clientToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"type": "METRIC_OBSERVATION",
"body": "***"
},
"responseElements": {
"investigationGroupArn": "arn:aws:aiops:us-east-1:123456789012:investigation-group/021345abcdef67890",
"investigationId": "bcdef01234567890",
"investigationEventId": "14567890abcdef0g"
},
"requestId": "e9caf887-8d88-11e5-a331-3332aa445952",
"eventId": "49d14f36-6450-44a5-a501-b0fdcdfaeb98",
"readOnly": false,
"resources": [{
"accountId": "123456789012",
"type": "AWS::AIOps::InvestigationGroup",
"ARN": "arn:aws:aiops:us-east-1:123456789012:investigation-group/021345abcdef67890"
}],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data"
}
```
En el siguiente ejemplo, se muestra una entrada en el registro de las investigaciones operativas de Amazon Q Developer que ilustra la acción `UpdateInvestigationEvent`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:sts::123456789012:assumed-role/role_name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:role/role_name",
"accountId": "123456789012",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-10-30T16:17:49Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-10-30T16:24:48Z",
"eventSource": "aiops.amazonaws.com",
"eventName": "UpdateInvestigationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "exampleUserAgent",
"requestParameters": {
"identifier": "arn:aws:aiops:us-east-1:123456789012:investigation-group/021345abcdef67890",
"investigationId": "bcdef01234567890",
"investigationEventId": "14567890abcdef0g",
"comment": "***"
},
"responseElements": null,
"requestId": "e9caf887-8d88-11e5-a331-3332aa445952",
"eventId": "49d14f36-6450-44a5-a501-b0fdcdfaeb98",
"readOnly": false,
"resources": [{
"accountId": "123456789012",
"type": "AWS::AIOps::InvestigationGroup",
"ARN": "arn:aws:aiops:us-east-1:123456789012:investigation-group/021345abcdef67890"
}],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data"
}
```
## Monitor de flujo de red de CloudTrail
El Monitor de flujo de red admite el registro de las siguientes acciones como eventos en archivos de registros de CloudTrail.
+ [CreateMonitor](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_CreateMonitor.html)
+ [CreateScope](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_CreateScope.html)
+ [DeleteMonitor](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_DeleteMonitor.html)
+ [DeleteScope](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_DeleteScope.html)
+ [GetMonitor](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetMonitor.html)
+ [GetScope](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetScope.html)
+ [ListMonitors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_ListMonitors.html)
+ [ListScopes](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_ListScopes.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_ListTagsForResource.html)
+ [TagResource](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_UntagResource.html)
+ [UpdateMonitor](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_UpdateMonitor.html)
+ [UpdateScope](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_UpdateScope.html)
### Ejemplo: entrada en el archivo de registro del Monitor de flujo de red
En el siguiente ejemplo, se muestra una entrada en el registro del Monitor de flujo de red que ilustra la acción `CreateMonitor`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:assumed-role/role_name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:role/Admin",
"accountId": "123456789012",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-03T15:58:11Z",
"eventSource": "networkflowmonitor.amazonaws.com",
"eventName": "CreateMonitor",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": {
"MonitorName": "TestMonitor",
"ClientToken": "33551db7-1618-4aab-cdef-EXAMPLE33333",
"LocalResources": [
{
"Type": "AWS::EC2::Subnet",
"Identifier": "subnet-cdef-EXAMPLEbbbbb"
},
{
"Type": "AWS::EC2::Subnet",
"Identifier": "subnet-cdef-EXAMPLEccccc"
},
{
"Type": "AWS::EC2::Subnet",
"Identifier": "subnet-cdef-EXAMPLEddddd"
},
{
"Type": "AWS::EC2::Subnet",
"Identifier": "subnet-cdef-EXAMPLEeeeee"
},
{
"Type": "AWS::EC2::Subnet",
"Identifier": "subnet-cdef-EXAMPLEfffff"
},
{
"Type": "AWS::EC2::Subnet",
"Identifier": "subnet-cdef-EXAMPLEggggg"
}
]
},
"responseElements": {
"Access-Control-Expose-Headers": "*",
"MonitorArn": "arn:aws:networkflowmonitor:us-east-1:000000000000:monitor/TestMonitor",
"MonitorName": "TestMonitor",
"MonitorStatus": "ACTIVE"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:assumed-role/role_name",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:role/Admin",
"accountId":"123456789012",
"userName": "SAMPLE_NAME"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2022-10-11T17:25:41Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2022-10-11T17:30:18Z",
"eventSource": "networkflowmonitor.amazonaws.com",
"eventName": "ListMonitors",
"awsRegion": "us-east-2",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": null,
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
## Eventos del plano de datos del Monitor de flujo de red en CloudTrail
CloudTrail puede capturar actividades de API relacionadas con las operaciones del plano de datos de CloudWatch-NetworkFlowMonitor.
Los [eventos de datos](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#logging-data-events), también conocidos como operaciones del plano de datos, brindan información sobre las operaciones de recursos que se realizan sobre un recurso o en él. Los eventos de datos suelen ser actividades de gran volumen.
Para habilitar el registro de eventos de datos del Monitor de flujo de red en archivos de CloudTrail, deberá habilitar el registro de la actividad de API del plano de datos en CloudTrail. Para más información, consulte [Logging data events for trails](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html).
Los eventos del plano de datos se pueden filtrar de acuerdo al tipo de recurso. Debido a los costos adicionales por utilizar eventos de datos en CloudTrail, el filtrado por recurso permite tener un mejor control sobre lo que registra y paga.
Con la información que CloudTrail recopila, puede identificar una solicitud específica a las API del plano de datos de CloudWatch-NetworkFlowMonitor, la dirección IP del solicitante, la identidad del solicitante y la fecha y hora de la solicitud. El registro de las API del plano de datos con CloudTrail puede ayudarlo con las auditorías operacionales y de riesgos, la gobernanza y la conformidad de la cuenta de AWS.
Las siguientes son las API del plano de datos del Monitor de flujo de red.
+ [GetQueryResultsMonitorTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsMonitorTopContributors.html)
+ [GetQueryResultsMonitorsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsMonitorsTopContributors.html)
+ [GetQueryResultsWorkloadInsightsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsWorkloadInsightsTopContributors.html)
+ [GetQueryResultsWorkloadInsightsTopContributorsData](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsWorkloadInsightsTopContributorsData.html)
+ [GetQueryStatusMonitorTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryStatusMonitorTopContributors.html)
+ [GetQueryStatusMonitorsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryStatusMonitorsTopContributors.html)
+ [GetQueryStatusWorkloadInsightsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryStatusWorkloadInsightsTopContributors.html)
+ [GetQueryStatusWorkloadInsightsTopContributorsData](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryStatusWorkloadInsightsTopContributorsData.html)
+ [StartQueryMonitorTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StartQueryMonitorTopContributors.html)
+ [StartQueryMonitorsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StartQueryMonitorsTopContributors.html)
+ [StartQueryWorkloadInsightsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StartQueryWorkloadInsightsTopContributors.html)
+ [StartQueryWorkloadInsightsTopContributorsData](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StartQueryWorkloadInsightsTopContributorsData.html)
+ [StopQueryMonitorTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StopQueryMonitorTopContributors.html)
+ [StopQueryMonitorsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StopQueryMonitorsTopContributors.html)
+ [StopQueryWorkloadInsightsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StopQueryWorkloadInsightsTopContributors.html)
+ [StopQueryWorkloadInsightsTopContributorsData](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StopQueryWorkloadInsightsTopContributorsData.html)
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail que ilustra la acción [GetQueryResultsMonitorsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsMonitorsTopContributors.html).
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:assumed-role/role_name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:role/Admin",
"accountId": "123456789012",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-15T14:08:04Z",
"eventSource": "networkflowmonitor.amazonaws.com",
"eventName": "GetQueryResultsMonitorTopContributors",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"errorCode": "AccessDenied",
"requestParameters": {
"QueryId": "a1b2c3d4-5678-90ab-cdef-EXAMPLEQuery,
"MaxResults": "20",
"MonitorName": "TestMonitor"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::NetworkFlowMonitor::Monitor",
"ARN": "arn:aws:networkflowmonitor:us-east-1:123456789012:monitor/TestMonitor"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "000000000000",
"eventCategory": "Data"
}
```
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail que ilustra la acción [GetQueryResultsWorkloadInsightsTopContributors](https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsWorkloadInsightsTopContributors.html).
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:assumed-role/role_name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:role/Admin",
"accountId": "123456789012",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-15T14:08:04Z",
"eventSource": "networkflowmonitor.amazonaws.com",
"eventName": "GetQueryResultsWorkloadInsightsTopContributorsData",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"errorCode": "AccessDenied",
"requestParameters": {
"QueryId": "a1b2c3d4-5678-90ab-cdef-EXAMPLEQuery",
"ScopeId": "a1b2c3d4-5678-90ab-cdef-EXAMPLEScope"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": true,
"resources": [
{
"accountId": "496383180932",
"type": "AWS::NetworkFlowMonitor::Scope",
"ARN": "arn:aws:networkflowmonitor:us-east-1:123456789012:scope/a1b2c3d4-5678-90ab-cdef-EXAMPLEScope"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "000000000000",
"eventCategory": "Data"
}
```
## Internet Monitor en CloudTrail
Internet Monitor admite el registro de las siguientes acciones como eventos en archivos de registro de CloudTrail.
+ [CreateMonitor](https://docs.aws.amazon.com/internet-monitor/latest/api/API_CreateMonitor.html)
+ [DeleteMonitor](https://docs.aws.amazon.com/internet-monitor/latest/api/API_DeleteMonitor.html)
+ [GetHealthEvent](https://docs.aws.amazon.com/internet-monitor/latest/api/API_GetHealthEvent.html)
+ [GetMonitor](https://docs.aws.amazon.com/internet-monitor/latest/api/API_GetMonitor.html)
+ [GetQueryResults](https://docs.aws.amazon.com/internet-monitor/latest/api/API_GetQueryResults.html)
+ [GetQueryStatus](https://docs.aws.amazon.com/internet-monitor/latest/api/API_GetQueryStatus.html)
+ [ListHealthEvents](https://docs.aws.amazon.com/internet-monitor/latest/api/API_ListHealthEvents.html)
+ [ListInternetEvents](https://docs.aws.amazon.com/internet-monitor/latest/api/API_ListInternetEvents.html)
+ [ListMonitors](https://docs.aws.amazon.com/internet-monitor/latest/api/API_ListMonitors.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/internet-monitor/latest/api/API_ListTagsForResource.html)
+ [StartQuery](https://docs.aws.amazon.com/internet-monitor/latest/api/API_StartQuery.html)
+ [StopQuery](https://docs.aws.amazon.com/internet-monitor/latest/api/API_StopQuery.html)
+ [TagResource](https://docs.aws.amazon.com/internet-monitor/latest/api/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/internet-monitor/latest/api/API_UntagResource.html)
+ [UpdateMonitor](https://docs.aws.amazon.com/internet-monitor/latest/api/API_UpdateMonitor.html)
### Ejemplo: entradas de archivos de registro de Internet Monitor
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail Internet Monitor que ilustra la acción `ListMonitors`.
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:assumed-role/role_name",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:role/Admin",
"accountId":"123456789012",
"userName": "SAMPLE_NAME"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2022-10-11T17:25:41Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2022-10-11T17:30:18Z",
"eventSource": "internetmonitor.amazonaws.com",
"eventName": "ListMonitors",
"awsRegion": "us-east-2",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": null,
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail Internet Monitor que ilustra la acción `CreateMonitor`.
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:assumed-role/role_name",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::000000000000:role/Admin",
"accountId":"123456789012",
"userName": "SAMPLE_NAME"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2022-10-11T17:25:41Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2022-10-11T17:30:08Z",
"eventSource": "internetmonitor.amazonaws.com",
"eventName": "CreateMonitor",
"awsRegion": "us-east-2",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": {
"MonitorName": "TestMonitor",
"Resources": ["arn:aws:ec2:us-east-2:444455556666:vpc/vpc-febc0b95"],
"ClientToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333"
},
"responseElements": {
"Arn": "arn:aws:internetmonitor:us-east-2:444455556666:monitor/ct-onboarding-test",
"Status": "PENDING"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
## Información de CloudWatch Synthetics en CloudTrail
CloudWatch Synthetics admite el registro de las siguientes acciones como eventos en archivos de registro de CloudTrail:
+ [AssociateResource](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_AssociateResource.html)
+ [CreateCanary](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_CreateCanary.html)
+ [CreateGroup](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_CreateGroup.html)
+ [DeleteCanary](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DeleteCanary.html)
+ [DeleteGroup](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DeleteGroup.html)
+ [DescribeCanaries](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DescribeCanaries.html)
+ [DescribeCanariesLastRun](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DescribeCanariesLastRun.html)
+ [DescribeRuntimeVersions](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DescribeRuntimeVersions.html)
+ [DisassociateResource](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DisassociateResource.html)
+ [GetCanary](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_GetCanary.html)
+ [GetCanaryRuns](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_GetCanaryRuns.html)
+ [GetGroup](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_GetGroup.html)
+ [ListAssociatedGroups](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_ListAssociatedGroups.html)
+ [ListGroupResources](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_ListGroupResources.html)
+ [ListGroups](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_ListGroups.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_ListTagsForResource.html)
+ [StartCanary](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_StartCanary.html)
+ [StartCanaryDryRun](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_StartCanaryDryRun.html)
+ [StopCanary](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_StopCanary.html)
+ [TagResource](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_UntagResource.html)
+ [UpdateCanary](https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_UpdateCanary.html)
### Ejemplo: Entradas de archivos de registro de CloudWatch Synthetics
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail Synthetics que ilustra la acción `DescribeCanaries`.
```
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:assumed-role/role_name",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111222333444:role/Administrator",
"accountId":"123456789012",
"userName": "SAMPLE_NAME"
},
"webIdFederationData": {},
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2020-04-08T21:43:24Z"
}
}
},
"eventTime": "2020-04-08T23:06:47Z",
"eventSource": "synthetics.amazonaws.com",
"eventName": "DescribeCanaries",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "aws-internal/3 aws-sdk-java/1.11.590 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.212-b03 java/1.8.0_212 vendor/Oracle_Corporation",
"requestParameters": null,
"responseElements": null,
"requestID": "201ed5f3-15db-4f87-94a4-123456789",
"eventID": "73ddbd81-3dd0-4ada-b246-123456789",
"readOnly": true,
"eventType": "AwsApiCall",
"recipientAccountId": "111122223333"
}
```
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail Synthetics que ilustra la acción `UpdateCanary`.
```
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:assumed-role/role_name",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111222333444:role/Administrator",
"accountId":"123456789012",
"userName": "SAMPLE_NAME"
},
"webIdFederationData": {},
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2020-04-08T21:43:24Z"
}
}
},
"eventTime": "2020-04-08T23:06:47Z",
"eventSource": "synthetics.amazonaws.com",
"eventName": "UpdateCanary",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-internal/3 aws-sdk-java/1.11.590 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.212-b03 java/1.8.0_212 vendor/Oracle_Corporation",
"requestParameters": {
"Schedule": {
"Expression": "rate(1 minute)"
},
"name": "sample_canary_name",
"Code": {
"Handler": "myOwnScript.handler",
"ZipFile": "SAMPLE_ZIP_FILE"
}
},
"responseElements": null,
"requestID": "fe4759b0-0849-4e0e-be71-1234567890",
"eventID": "9dc60c83-c3c8-4fa5-bd02-1234567890",
"readOnly": false,
"eventType": "AwsApiCall",
"recipientAccountId": "111122223333"
}
```
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail Synthetics que ilustra la acción `GetCanaryRuns`.
```
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::123456789012:assumed-role/role_name",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111222333444:role/Administrator",
"accountId":"123456789012",
"userName": "SAMPLE_NAME"
},
"webIdFederationData": {},
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2020-04-08T21:43:24Z"
}
}
},
"eventTime": "2020-04-08T23:06:30Z",
"eventSource": "synthetics.amazonaws.com",
"eventName": "GetCanaryRuns",
"awsRegion": "us-east-1",
"sourceIPAddress": "127.0.0.1",
"userAgent": "aws-internal/3 aws-sdk-java/1.11.590 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.212-b03 java/1.8.0_212 vendor/Oracle_Corporation",
"requestParameters": {
"Filter": "TIME_RANGE",
"name": "sample_canary_name",
"FilterValues": [
"2020-04-08T23:00:00.000Z",
"2020-04-08T23:10:00.000Z"
]
},
"responseElements": null,
"requestID": "2f56318c-cfbd-4b60-9d93-1234567890",
"eventID": "52723fd9-4a54-478c-ac55-1234567890",
"readOnly": true,
"eventType": "AwsApiCall",
"recipientAccountId": "111122223333"
}
```
## Información de CloudWatch RUM en CloudTrail
CloudWatch RUM admite el registro de las siguientes acciones como eventos en archivos de registro de CloudTrail:
+ [BatchCreateRumMetricDefinitions](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_BatchCreateRumMetricDefinitions.html)
+ [BatchDeleteRumMetricDefinitions](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_BatchDeleteRumMetricDefinitions.html)
+ [BatchGetRumMetricDefinitions](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_BatchGetRumMetricDefinitions.html)
+ [CreateAppMonitor](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_CreateAppMonitor.html)
+ [DeleteAppMonitor](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_DeleteAppMonitor.html)
+ [DeleteResourcePolicy](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_DeleteResourcePolicy.html)
+ [DeleteRumMetricsDestination](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_DeleteRumMetricsDestination.html)
+ [GetAppMonitor](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_GetAppMonitor.html)
+ [GetAppMonitorData](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_GetAppMonitorData.html)
+ [GetResourcePolicy](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_GetResourcePolicy.html)
+ [ListAppMonitors](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_ListAppMonitors.html)
+ [ListRumMetricsDestinations](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_ListRumMetricsDestinations.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_ListTagsForResource.html)
+ [PutResourcePolicy](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_PutResourcePolicy.html)
+ [PutRumMetricsDestination](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_PutRumMetricsDestination.html)
+ [TagResource](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_UntagResource.html)
+ [UpdateAppMonitor](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_UpdateAppMonitor.html)
+ [UpdateRumMetricDefinition](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_UpdateRumMetricDefinition.html)
### Ejemplo: Entradas de archivos de registro de CloudWatch RUM
Esta sección contiene ejemplos de entradas de CloudTrail para algunas API de CloudWatch RUM.
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail que ilustra la acción [CreateAppMonitor](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_CreateAppMonitor.html).
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:sts::777777777777:assumed-role/EXAMPLE",
"accountId": "777777777777",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:iam::777777777777:role/EXAMPLE",
"accountId": "777777777777",
"userName": "USERNAME_EXAMPLE"
},
"attributes": {
"creationDate": "2024-07-23T16:48:47Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-07-23T18:02:57Z",
"eventSource": "rum.amazonaws.com",
"eventName": "CreateAppMonitor",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.240.198.39",
"userAgent": "aws-internal/3 aws-sdk-java/1.12.641 Linux/5.10.219-186.866.amzn2int.x86_64 OpenJDK_64-Bit_Server_VM/25.402-b08 java/1.8.0_402 vendor/Oracle_Corporation cfg/retry-mode/standard",
"requestParameters": {
"CustomEvents": {
"Status": "ENABLED"
},
"CwLogEnabled": true,
"Domain": "*.github.io",
"AppMonitorConfiguration": {
"SessionSampleRate": 1,
"IncludedPages": [],
"ExcludedPages": [],
"Telemetries": [
"performance",
"errors",
"http"
],
"EnableXRay": false,
"AllowCookies": true,
"IdentityPoolId": "us-east-1:c81b9a1c-a5c9-4de5-8585-eb8df04e66f0"
},
"Tags": {
"TestAppMonitor": ""
},
"Name": "TestAppMonitor"
},
"responseElements": {
"Id": "65a8cc63-4ae8-4f2c-b5fc-4a54ef43af51"
},
"requestID": "cf7c30ad-25d3-4274-bab1-39c95a558007",
"eventID": "2d43cc69-7f89-4f1a-95ae-0fc7e9b9fb3b",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "777777777777",
"eventCategory": "Management"
}
```
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail que ilustra la acción [PutRumMetricsDestination](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_PutRumMetricsDestination.html).
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:sts::777777777777:assumed-role/EXAMPLE",
"accountId": "777777777777",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:iam::777777777777:role/EXAMPLE",
"accountId": "777777777777",
"userName": "USERNAME_EXAMPLE"
},
"attributes": {
"creationDate": "2024-07-23T16:48:47Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-07-23T18:22:22Z",
"eventSource": "rum.amazonaws.com",
"eventName": "PutRumMetricsDestination",
"awsRegion": "us-east-1",
"sourceIPAddress": "52.94.133.142",
"userAgent": "aws-cli/2.13.25 Python/3.11.5 Linux/5.10.219-186.866.amzn2int.x86_64 exe/x86_64.amzn.2 prompt/off command/rum.put-rum-metrics-destination",
"requestParameters": {
"Destination": "CloudWatch",
"AppMonitorName": "TestAppMonitor"
},
"responseElements": null,
"requestID": "9b03fcce-b3a2-44fc-b771-900e1702998a",
"eventID": "6250f9b7-0505-4f96-9668-feb64f82de5b",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "777777777777",
"eventCategory": "Management"
}
```
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail que ilustra la acción [BatchCreateRumMetricsDefinitions](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_BatchCreateRumMetricsDefinitions.html).
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:sts::777777777777:assumed-role/EXAMPLE",
"accountId": "777777777777",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:iam::777777777777:role/EXAMPLE",
"accountId": "777777777777",
"userName": "USERNAME_EXAMPLE"
},
"attributes": {
"creationDate": "2024-07-23T16:48:47Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-07-23T18:23:11Z",
"eventSource": "rum.amazonaws.com",
"eventName": "BatchCreateRumMetricDefinitions",
"awsRegion": "us-east-1",
"sourceIPAddress": "52.94.133.142",
"userAgent": "aws-cli/2.13.25 Python/3.11.5 Linux/5.10.219-186.866.amzn2int.x86_64 exe/x86_64.amzn.2 prompt/off command/rum.batch-create-rum-metric-definitions",
"requestParameters": {
"Destination": "CloudWatch",
"MetricDefinitions": [
{
"Name": "NavigationToleratedTransaction",
"Namespace": "AWS/RUM",
"DimensionKeys": {
"metadata.browserName": "BrowserName"
},
"EventPattern": "{\"metadata\":{\"browserName\":[\"Chrome\"]},\"event_type\":[\"com.amazon.rum.performance_navigation_event\"],\"event_details\": {\"duration\": [{\"numeric\": [\"<=\",2000,\"<\",8000]}]}}"
},
{
"Name": "HttpErrorCount",
"DimensionKeys": {
"metadata.browserName": "BrowserName",
"metadata.countryCode": "CountryCode"
},
"EventPattern": "{\"metadata\":{\"browserName\":[\"Chrome\"], \"countryCode\":[\"US\"]},\"event_type\":[\"com.amazon.rum.http_event\"]}"
}
],
"AppMonitorName": "TestAppMonitor"
},
"responseElements": {
"Errors": [],
"MetricDefinitions": []
},
"requestID": "b14c5eda-f107-48e5-afae-1ac20d0962a8",
"eventID": "001b55c6-1de1-48c0-a236-31096dffe249",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "777777777777",
"eventCategory": "Management"
}
```
## Eventos del plano de datos de CloudWatch RUM en CloudTrail
CloudTrail puede capturar actividades de API relacionadas con la operación del plano de datos de CloudWatch RUM [PutRumEvents](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_PutRumEvents.html).
Los [eventos de datos](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#logging-data-events), también conocidos como operaciones del plano de datos, brindan información sobre las operaciones de recursos que se realizan sobre un recurso o en él. Los eventos de datos suelen ser actividades de gran volumen.
Para habilitar el registro de eventos de datos **PutRumEvents** en archivos de CloudTrail, deberá habilitar el registro de la actividad de API del plano de datos en CloudTrail. Para más información, consulte [Logging data events for trails](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html).
Los eventos del plano de datos se pueden filtrar de acuerdo al tipo de recurso. Debido a los costos adicionales por utilizar eventos de datos en CloudTrail, el filtrado por recurso permite tener un mejor control sobre lo que registra y paga.
Con la información que CloudTrail recopila, puede identificar una solicitud específica a la API **PutRumEvents** de CloudWatch RUM, la dirección IP del solicitante, la identidad del solicitante y la fecha y hora de la solicitud. El registro de la API **PutRumEvents** con CloudTrail ayuda a habilitar la auditoría operacional y de riesgos, la gobernanza y la conformidad de la cuenta de AWS.
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail que ilustra la acción [PutRumEvents](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_PutRumEvents.html).
```
{
"Records": [
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:sts::777777777777:assumed-role/EXAMPLE",
"accountId": "777777777777",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLE_PRINCIPAL_ID",
"arn": "arn:aws:iam::777777777777:role/EXAMPLE",
"accountId": "777777777777",
"userName": "USERNAME_EXAMPLE"
},
"attributes": {
"creationDate": "2024-05-16T20:32:39Z",
"mfaAuthenticated": "false"
}
},
"invokedBy": "AWS Internal"
},
"eventTime": "2024-05-16T20:32:42Z",
"eventSource": "rum.amazonaws.com",
"eventName": "PutRumEvents",
"awsRegion": "us-east-1",
"sourceIPAddress": "AWS Internal",
"userAgent": "AWS Internal",
"requestParameters": {
"id": "73ddbd81-1234-5678-b246-123456789",
"batchId": "123456-3dd0-4ada-b246-123456789",
"appMonitorDetails": {
"name": "APP-MONITOR-NAME",
"id": "123456-3dd0-4ada-b246-123456789",
"version": "1.0.0"
},
"userDetails": {
"userId": "73ddbd81-1111-9999-b246-123456789",
"sessionId": "a1b2c3456-15db-4f87-6789-123456789"
},
"rumEvents": [
{
"id": "201f367a-15db-1234-94a4-123456789",
"timestamp": "May 16, 2024, 8:32:20 PM",
"type": "com.amazon.rum.dom_event",
"metadata": "{}",
"details": "{}"
}
]
},
"responseElements": null,
"requestID": "201ed5f3-15db-4f87-94a4-123456789",
"eventID": "73ddbd81-3dd0-4ada-b246-123456789",
"readOnly": false,
"resources": [
{
"accountId": "777777777777",
"type": "AWS::RUM::AppMonitor",
"ARN": "arn:aws:rum:us-east-1:777777777777:appmonitor/APPMONITOR_NAME_EXAMPLE"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "777777777777",
"eventCategory": "Data"
}
]
}
```
## Información de Network Synthetic Monitor en CloudTrail
Network Synthetic Monitor admite el registro de las siguientes acciones como eventos en archivos de registros de CloudTrail:
+ [CreateMonitor](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_CreateMonitor.html)
+ [CreateProbe](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_CreateProbe.html)
+ [DeleteMonitor](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_DeleteMonitor.html)
+ [DeleteProbe](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_DeleteProbe.html)
+ [GetMonitor](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_GetMonitor.html)
+ [GetProbe](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_GetProbe.html)
+ [ListMonitors](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_ListMonitors.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_ListTagsForResource.html)
+ [TagResource](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_UntagResource.html)
+ [UpdateMonitor](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_UpdateMonitor.html)
+ [UpdateProbe](https://docs.aws.amazon.com/networkmonitor/latest/APIReference/API_UpdateProbe.html)
### Ejemplo: entradas en el archivo de registro de Network Synthetic Monitor
En el siguiente ejemplo, se muestra una entrada en el registro de CloudTrail de Network Synthetic Monitor que ilustra la acción `CreateMonitor`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:assumed-role/role_name",
"accountId": "111122223333",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-03T15:58:11Z",
"eventSource": "networksynthetics.amazonaws.com",
"eventName": "CreateMonitor",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": {
"MonitorName": "TestNetworkSyntheticMonitor",
"ClientToken": "33551db7-1618-4aab-cdef-EXAMPLE33333"
},
"responseElements": {
"MonitorArn": "arn:aws:networksynthetics:us-east-1:111122223333:monitor/TestNetworkSyntheticMonitor",
"MonitorName": "TestNetworkSyntheticMonitor",
"MonitorStatus": "ACTIVE"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
## Información de CloudWatch Observability Access Manager en CloudTrail
CloudWatch Observability Access Manager admite el registro de las siguientes acciones como eventos en archivos de registros de CloudTrail:
+ [CreateLink](https://docs.aws.amazon.com/OAM/latest/APIReference/API_CreateLink.html)
+ [CreateSink](https://docs.aws.amazon.com/OAM/latest/APIReference/API_CreateSink.html)
+ [DeleteLink](https://docs.aws.amazon.com/OAM/latest/APIReference/API_DeleteLink.html)
+ [DeleteSink](https://docs.aws.amazon.com/OAM/latest/APIReference/API_DeleteSink.html)
+ [GetLink](https://docs.aws.amazon.com/OAM/latest/APIReference/API_GetLink.html)
+ [GetSink](https://docs.aws.amazon.com/OAM/latest/APIReference/API_GetSink.html)
+ [GetSinkPolicy](https://docs.aws.amazon.com/OAM/latest/APIReference/API_GetSinkPolicy.html)
+ [ListAttachedLinks](https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListAttachedLinks.html)
+ [ListLinks](https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListLinks.html)
+ [ListSinks](https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListTagsForResource.html)
+ [PutSinkPolicy](https://docs.aws.amazon.com/OAM/latest/APIReference/API_PutSinkPolicy.html)
+ [TagResource](https://docs.aws.amazon.com/OAM/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/OAM/latest/APIReference/API_UntagResource.html)
+ [UpdateLink](https://docs.aws.amazon.com/OAM/latest/APIReference/API_UpdateLink.html)
### Ejemplo: entradas de archivos de registros de CloudWatch Observability Access Manager
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail de CloudWatch Observability Access Manager que ilustra la acción `CreateSink`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:assumed-role/role_name",
"accountId": "111122223333",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-03T15:58:11Z",
"eventSource": "oam.amazonaws.com",
"eventName": "CreateSink",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": {
"Name": "TestObservabilitySink"
},
"responseElements": {
"Arn": "arn:aws:oam:us-east-1:111122223333:sink/TestObservabilitySink",
"Id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"Name": "TestObservabilitySink"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
## Información de CloudWatch Observability Admin en CloudTrail
CloudWatch Observability Admin admite el registro de las siguientes acciones como eventos en archivos de registros de CloudTrail:
+ [GetTelemetryEvaluationStatus](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryEvaluationStatus.html)
+ [GetTelemetryEvaluationStatusForOrganization](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryEvaluationStatusForOrganization.html)
+ [ListResourceTelemetry](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListResourceTelemetry.html)
+ [ListResourceTelemetryForOrganization](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListResourceTelemetryForOrganization.html)
+ [StartTelemetryEvaluation](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StartTelemetryEvaluation.html)
+ [StartTelemetryEvaluationForOrganization](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StartTelemetryEvaluationForOrganization.html)
+ [StopTelemetryEvaluation](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StopTelemetryEvaluation.html)
+ [StopTelemetryEvaluationForOrganization](https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StopTelemetryEvaluationForOrganization.html)
### Ejemplo: entradas de archivos de registros de CloudWatch Observability Admin
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail de CloudWatch Observability Admin que ilustra la acción `StartTelemetryEvaluation`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:assumed-role/role_name",
"accountId": "111122223333",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-03T15:58:11Z",
"eventSource": "observabilityadmin.amazonaws.com",
"eventName": "StartTelemetryEvaluation",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": {},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
## Información de CloudWatch Application Signals en CloudTrail
CloudWatch Application Signals admite el registro de las siguientes acciones como eventos en archivos de registros de CloudTrail:
+ [BatchGetServiceLevelObjectiveBudgetReport](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_BatchGetServiceLevelObjectiveBudgetReport.html)
+ [BatchUpdateExclusionWindows](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_BatchUpdateExclusionWindows.html)
+ [CreateServiceLevelObjective](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_CreateServiceLevelObjective.html)
+ [DeleteServiceLevelObjective](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_DeleteServiceLevelObjective.html)
+ [GetService](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_GetService.html)
+ [GetServiceLevelObjective](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_GetServiceLevelObjective.html)
+ [ListServiceDependencies](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceDependencies.html)
+ [ListServiceDependents](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceDependents.html)
+ [ListServiceLevelObjectives](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceLevelObjectives.html)
+ [ListServiceOperations](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceOperations.html)
+ [ListServices](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServices.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListTagsForResource.html)
+ [StartDiscovery](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_StartDiscovery.html)
+ [TagResource](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_UntagResource.html)
+ [UpdateServiceLevelObjective](https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_UpdateServiceLevelObjective.html)
### Ejemplo: entradas de archivos de registros de CloudWatch Application Signals
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail de CloudWatch Application Signals que ilustra la acción `CreateServiceLevelObjective`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:assumed-role/role_name",
"accountId": "111122223333",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-03T15:58:11Z",
"eventSource": "applicationsignals.amazonaws.com",
"eventName": "CreateServiceLevelObjective",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": {
"Name": "TestSLO",
"Description": "Test Service Level Objective"
},
"responseElements": {
"Arn": "arn:aws:applicationsignals:us-east-1:111122223333:slo/TestSLO"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
## Detalles de Información de aplicaciones de CloudWatch en CloudTrail
Información de aplicaciones de CloudWatch admite el registro de las siguientes acciones como eventos en archivos de registros de CloudTrail:
+ [AddWorkload](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_AddWorkload.html)
+ [CreateApplication](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_CreateApplication.html)
+ [CreateComponent](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_CreateComponent.html)
+ [CreateLogPattern](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_CreateLogPattern.html)
+ [DeleteApplication](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DeleteApplication.html)
+ [DeleteComponent](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DeleteComponent.html)
+ [DeleteLogPattern](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DeleteLogPattern.html)
+ [DescribeApplication](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeApplication.html)
+ [DescribeComponent](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeComponent.html)
+ [DescribeComponentConfiguration](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeComponentConfiguration.html)
+ [DescribeComponentConfigurationRecommendation](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeComponentConfigurationRecommendation.html)
+ [DescribeLogPattern](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeLogPattern.html)
+ [DescribeObservation](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeObservation.html)
+ [DescribeProblem](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeProblem.html)
+ [DescribeProblemObservations](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeProblemObservations.html)
+ [DescribeWorkload](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_DescribeWorkload.html)
+ [ListApplications](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListApplications.html)
+ [ListComponents](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListComponents.html)
+ [ListConfigurationHistory](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListConfigurationHistory.html)
+ [ListLogPatterns](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListLogPatterns.html)
+ [ListLogPatternSets](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListLogPatternSets.html)
+ [ListProblems](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListProblems.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListTagsForResource.html)
+ [ListWorkloads](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_ListWorkloads.html)
+ [RemoveWorkload](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_RemoveWorkload.html)
+ [TagResource](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_UntagResource.html)
+ [UpdateApplication](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_UpdateApplication.html)
+ [UpdateComponent](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_UpdateComponent.html)
+ [UpdateComponentConfiguration](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_UpdateComponentConfiguration.html)
+ [UpdateLogPattern](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_UpdateLogPattern.html)
+ [UpdateProblem](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_UpdateProblem.html)
+ [UpdateWorkload](https://docs.aws.amazon.com/cloudwatch/latest/APIReference/API_UpdateWorkload.html)
### Ejemplo: entradas de archivos de registros de Información de aplicaciones de CloudWatch
En el siguiente ejemplo, se muestra una entrada de registro de CloudTrail de Información de aplicaciones de CloudWatch que ilustra la acción `CreateApplication`.
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:assumed-role/role_name",
"accountId": "111122223333",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "SAMPLE_NAME"
},
"attributes": {
"creationDate": "2024-11-03T15:43:27Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2024-11-03T15:58:11Z",
"eventSource": "applicationinsights.amazonaws.com",
"eventName": "CreateApplication",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
"requestParameters": {
"ResourceGroupName": "TestApplicationResourceGroup"
},
"responseElements": {
"ApplicationInfo": {
"ResourceGroupName": "TestApplicationResourceGroup",
"LifeCycle": "ACTIVE"
}
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLEbbbbb",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```