翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
# を使用した Amazon Managed Grafana API コールのログ記録 AWS CloudTrail
Amazon Managed Grafana は、ユーザー、ロール、または AWS のサービスが実行したアクションの記録を提供するサービスである [AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html) と統合されています。Amazon Managed Grafana へのすべての API コールをイベントとしてキャプチャします。キャプチャされた呼び出しには、Amazon Managed Grafana コンソールからの呼び出しと、Amazon Managed Grafana API オペレーションへのコード呼び出しが含まれます。
Amazon Managed Grafana は Grafana API を使用する一部の呼び出しもキャプチャします。キャプチャされる呼び出しは、リソースを作成、更新、または削除する呼び出しなどのような、データを変更する呼び出しです。Amazon Managed Grafana でサポートされている Grafana API の詳細については、「[Grafana HTTP API の使用](Using-Grafana-APIs.md)」を参照してください。
CloudTrail で収集された情報を使用して、Amazon Managed Grafana に対するリクエスト、リクエスト元の IP アドレス、リクエストの作成日時、その他の詳細を確認できます。
各イベントまたはログエントリには、誰がリクエストを生成したかという情報が含まれます。アイデンティティ情報は、以下を判別するのに役立ちます。
+ ルートユーザーまたはユーザー認証情報のどちらを使用してリクエストが送信されたか。
+ リクエストが IAM Identity Center ユーザーに代わって行われたかどうか。
+ リクエストがロールまたはフェデレーションユーザーのテンポラリなセキュリティ認証情報を使用して行われたかどうか。
+ リクエストが、別の AWS のサービスによって送信されたかどうか。
CloudTrail は、アカウントを作成する AWS アカウント と でアクティブになり、CloudTrail **イベント履歴**に自動的にアクセスできます。CloudTrail の **[イベント履歴]** では、 AWS リージョンで過去 90 日間に記録された管理イベントの表示、検索、およびダウンロードが可能で、変更不可能な記録を確認できます。詳細については、「*AWS CloudTrail ユーザーガイド*」の「[CloudTrail イベント履歴の使用](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html)」を参照してください。**[イベント履歴]** の閲覧には CloudTrail の料金はかかりません。
AWS アカウント 過去 90 日間のイベントの継続的な記録については、証跡または [CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) イベントデータストアを作成します。
**CloudTrail 証跡**
*証跡*により、CloudTrail はログファイルを Amazon S3 バケットに配信できます。を使用して作成されたすべての証跡 AWS マネジメントコンソール はマルチリージョンです。 AWS CLIを使用する際は、単一リージョンまたは複数リージョンの証跡を作成できます。アカウント AWS リージョン 内のすべての でアクティビティをキャプチャするため、マルチリージョン証跡を作成することをお勧めします。単一リージョンの証跡を作成する場合、証跡の AWS リージョンに記録されたイベントのみを表示できます。証跡の詳細については、「*AWS CloudTrail ユーザーガイド*」の「[AWS アカウントの証跡の作成](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trail.html)」および「[組織の証跡の作成](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html)」を参照してください。
証跡を作成すると、進行中の管理イベントのコピーを 1 つ無料で CloudTrail から Amazon S3 バケットに配信できますが、Amazon S3 ストレージには料金がかかります。CloudTrail の料金の詳細については、「[AWS CloudTrail の料金](https://aws.amazon.com/cloudtrail/pricing/)」を参照してください。Amazon S3 の料金に関する詳細については、「[Amazon S3 の料金](https://aws.amazon.com/s3/pricing/)」を参照してください。
**CloudTrail Lake イベントデータストア**
*[CloudTrail Lake]* を使用すると、イベントに対して SQL ベースのクエリを実行できます。CloudTrail Lake は、行ベースの JSON 形式の既存のイベントを [Apache ORC](https://orc.apache.org/) 形式に変換します。ORC は、データを高速に取得するために最適化された単票ストレージ形式です。イベントは、*イベントデータストア*に集約されます。イベントデータストアは、[高度なイベントセレクタ](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-concepts.html#adv-event-selectors)を適用することによって選択する条件に基づいた、イベントのイミュータブルなコレクションです。どのイベントが存続し、クエリに使用できるかは、イベントデータストアに適用するセレクタが制御します。CloudTrail Lake の詳細については、 *AWS CloudTrail ユーザーガイド*の[AWS CloudTrail 「Lake の使用](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html)」を参照してください。
CloudTrail Lake のイベントデータストアとクエリにはコストがかかります。イベントデータストアを作成する際に、イベントデータストアに使用する[料金オプション](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html#cloudtrail-lake-manage-costs-pricing-option)を選択します。料金オプションによって、イベントの取り込みと保存にかかる料金、および、そのイベントデータストアのデフォルトと最長の保持期間が決まります。CloudTrail の料金の詳細については、「[AWS CloudTrail の料金](https://aws.amazon.com/cloudtrail/pricing/)」を参照してください。
## CloudTrail の Amazon Managed Grafana 管理イベント
[管理イベント](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events)は、 のリソースで実行される管理オペレーションに関する情報を提供します AWS アカウント。これらのイベントは、コントロールプレーンオペレーションとも呼ばれます。CloudTrail は、デフォルトで管理イベントをログ記録します。
Amazon Managed Grafana では、すべての Amazon Managed Grafana コントロールプレーンオペレーションが管理イベントとしてログに記録されます。Amazon Managed Grafana が CloudTrail にログ記録する Amazon Managed Grafana コントロールプレーンオペレーションのリストについては、「[Amazon Managed Grafana API リファレンス](https://docs.aws.amazon.com/grafana/latest/APIReference/Welcome.html)」を参照してください。
## Amazon Managed Grafana イベント例
各イベントは任意の送信元からの単一のリクエストを表し、リクエストされた API オペレーション、オペレーションの日時、リクエストパラメータなどに関する情報を含みます。CloudTrail ログファイルは、パブリック API コールの順序付けられたスタックトレースではないため、イベントは特定の順序で表示されません。
次の例は、CreateWorkspace の CloudTrail ログエントリを示しています。
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "ANPAJ2UCCR6DPCEXAMPLE:sdbt-example",
"arn": "arn:aws:sts::123456789012:assumed-role/Admin/sdbt-example",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "ANPAJ2UCCR6DPCEXAMPLE",
"arn": "arn:aws:iam::123456789012:role/Admin",
"accountId": "123456789012",
"userName": "Admin"
},
"webIdFederationData": {},
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2020-11-26T20:59:21Z"
}
}
},
"eventTime": "2020-11-26T21:10:48Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "CreateWorkspace",
"awsRegion": "us-west-2",
"sourceIPAddress": "205.251.233.179",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:82.0) Gecko/20100101 Firefox/82.0",
"requestParameters": {
"permissionType": "Service Managed",
"workspaceNotificationDestinations": [
"SNS"
],
"workspaceDescription": "",
"clientToken": "12345678-abcd-1234-5678-111122223333",
"workspaceDataSources": [
"SITEWISE",
"XRAY",
"CLOUDWATCH",
"ELASTICSEARCH",
"PROMETHEUS",
"TIMESTREAM"
],
"accountAccessType": "CURRENT_ACCOUNT",
"workspaceName": "CloudTrailTest",
"workspaceRoleArn": "arn:aws:iam::123456789012:role/service-role/AmazonGrafanaServiceRole-27O5976ol"
},
"responseElements": {
"Access-Control-Expose-Headers": "x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date",
"workspace": {
"accountAccessType": "CURRENT_ACCOUNT",
"created": 1606425045.22,
"dataSources": [
"SITEWISE",
"XRAY",
"CLOUDWATCH",
"ELASTICSEARCH",
"PROMETHEUS",
"TIMESTREAM"
],
"description": "",
"grafanaVersion": "7.3.1",
"id": "g-a187c473d3",
"modified": 1606425045.22,
"name": "CloudTrailTest",
"notificationDestinations": [
"SNS"
],
"permissionType": "Service Managed",
"status": "CREATING",
"workspaceRoleArn": "arn:aws:iam::123456789012:role/service-role/AmazonGrafanaServiceRole-27O5976ol"
}
},
"requestID": "12345678-5533-4e10-b486-e9c7b219f2fd",
"eventID": "12345678-2710-4359-ad90-b902dbfb606b",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "123456789012"
}
```
次の例は UpdateWorkspaceAuthentication アクションの CloudTrail ログエントリを示しています。
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAU2UJBF3NRO35YZ3GV:CODETEST_Series_GrafanaApiTestHydraCanary12-o6aeXqaXS_1090259374",
"arn": "arn:aws:sts::332073610971:assumed-role/HydraInvocationRole-4912743f1277b7c3c67cb29518f8bc413ae/CODETEST_Series_GrafanaApiTestHydraCanary12-o6aeXqaXS_1090259374",
"accountId": "111122223333",
"accessKeyId": "AIDACKCEVSQ6C2EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAU2UJBF3NRO35YZ3GV",
"arn": "arn:aws:iam::111122223333:role/HydraInvocationRole-4912743f1277b7c3c67cb29518f8bc413ae",
"accountId": "332073610971",
"userName": "TestInvocationRole-4912743f1277b7c3c67cb29518f8bc413ae"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2021-08-04T20:50:24Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2021-08-04T21:29:25Z",
"eventSource": "gamma-grafana.amazonaws.com",
"eventName": "UpdateWorkspaceAuthentication",
"awsRegion": "us-west-2",
"sourceIPAddress": "34.215.72.249",
"userAgent": "aws-internal/3 aws-sdk-java/1.11.1030 Linux/4.14.231-180.360.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/11.0.11+9-LTS java/11.0.11 vendor/Amazon.com_Inc. cfg/retry-mode/legacy exec-env/AWS_Lambda_java11",
"requestParameters": {
"authenticationProviders": [
"AWS_SSO",
"SAML"
],
"samlConfiguration": {
"idpMetadata": {
"url": "https://portal.sso.us-east-1.amazonaws.com/saml/metadata/NjMwMDg2NDc4OTA3X2lucy1jY2E2ZGU3ZDlmYjdiM2Vh"
}
},
"workspaceId": "g-84ea23c1b4"
},
"responseElements": {
"authentication": {
"awsSso": {
"ssoClientId": "gAROcWGs9-LoqCMIQ56XyEXAMPLE"
},
"providers": [
"AWS_SSO",
"SAML"
],
"saml": {
"configuration": {
"idpMetadata": {
"url": "https://portal.sso.us-east-1.amazonaws.com/saml/metadata/NjMwMDg2NDc4OTA3X2lucy1jY2E2ZGU3ZDlmYjdiM2Vh"
},
"loginValidityDuration": 60
},
"status": "CONFIGURED"
}
}
},
"requestID": "96adb1de-7fa5-487e-b6c6-6b0d4495cb71",
"eventID": "406bc825-bc52-475c-9c91-4c0d8a07c1fa",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
CloudTrail レコードの内容については、「*AWS CloudTrail ユーザーガイド*」の「[CloudTrail record contents](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-record-contents.html)」を参照してください。
## Grafana API イベント例
Amazon Managed Grafana は CloudTrail の一部の Grafana API コールもログに記録します。キャプチャされる呼び出しは、リソースを作成、更新、または削除する呼び出しなどのような、データを変更する呼び出しです。Amazon Managed Grafana でサポートされている Grafana API の詳細については、「[Grafana HTTP API の使用](Using-Grafana-APIs.md)」を参照してください。
** AWS IAM アイデンティティセンターを使用して Amazon Managed Grafana ワークスペースにサインインするユーザー**
```
{
"Records": [
{
"eventVersion": "1.08",
"userIdentity": {
"type": "SAMLUser",
"userName": "johndoe"
},
"eventTime": "2021-07-09T02:31:59Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "login-auth.sso",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36",
"requestParameters": null,
"responseElements": null,
"eventID": "176bf326-0302-4190-8dbf-dfdf481d8198",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:31:59.045984031Z",
"user": {
"userId": 1,
"orgId": 1,
"name": "johndoe",
"isAnonymous": false
},
"action": "login-auth.sso",
"requestUri": "",
"request": {
"query": {
"code": [
"eyJraWQiOiJrZXktMTU2Njk2ODEyMSIsImFsZyI6IkhTMzg0In0.eyJwbGFpbnRleHQiOiJZUzEwYWtaWHpBZUowTDlQcW5ROGFmZUw2YUZMRklPWUtkX2RRMmhmUUFFIiwiZXhwIjoxNjI1Nzk4MjE4LCJ0eXBlIjoiYXV0aENvZGUifQ.F6MCLvokeXFv1zEwaSg66wdfnNh0dEnLIKBZ4c1dhfNHX_XQywkSq3aqqUg4CsB7"
],
"state": [
"QUFBQURtdGxlUzB4TlRZNE9UVTFOekkyM2RUWUFUaHZHYXcyOU9ULUVaWHhNUXAwX184N25RVGVWMmd0enFpVE1iWlRPV0M0X09HaDZscjcweDZNbUE3blRjamNISk9RQ2hCUktrY093ZW52aDNWZ2R5UXVndnc4R2g0RkxsamkwMGNvektWbS1KYWRVYnZ0X3AtSU5JRzIxZjFvcWgxN19vM0lPaW9vY1FBVlhLVmEzRE5CRjQxTU1fM3VmYzNWdW53aGZ0QVdFWHBUWTNWTkxrcllKQ3I1akFOUmV1Zlh4Y3ZjQi1XOEVMa0RPUFBqM094VGgta2hHdVFxSDB4YXZKMng"
]
}
},
"result": {
"statusType": "failure"
},
"ipAddress": "192.0.2.0,198.51.100.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE",
"extUserInfo": "{\"OAuthToken\":null,\"AuthModule\":\"auth.sso\",\"AuthId\":\"92670be4c1-e524608b-82f2-452d-a707-161c1e5f4706\",\"UserId\":0,\"Email\":\"\",\"Login\":\"johndoe\",\"Name\":\"johndoe\",\"Groups\":null,\"OrgRoles\":{\"1\":\"Admin\"},\"IsGrafanaAdmin\":false,\"IsDisabled\":false}"
}
}
}
]
}
```
**Grafana API POST /api/auth/keys**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:32Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "157bbf19-6ba4-4704-bc3b-d3e334b3a2b8",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:32.419795511Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "api-key"
}
],
"requestUri": "",
"request": {
"body": "{\"name\":\"keyname\",\"role\":\"Admin\",\"secondsToLive\":60}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API DELETE /api/auth/keys/:id**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:33Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "delete",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "df1aafb3-28c6-4836-a64b-4d34538edc51",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:33.045041594Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "delete",
"resources": [
{
"ID": 0,
"type": "api-key"
}
],
"requestUri": "",
"request": {
"params": {
":id": "24"
}
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST /api/alerts/:id/pause**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:40Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "pause",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "d533a7ba-f193-45ac-a88c-75ed0594509b",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:40.261226856Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "pause",
"resources": [
{
"ID": 0,
"type": "alert"
}
],
"requestUri": "",
"request": {
"params": {
":alertId": "1"
},
"body": "{\"paused\":true}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana POST /api/alerts/test**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:39Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "test",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,10.0.42.208",
"userAgent": "python-requests/2.24.0",
"errorCode": "400",
"errorMessage": "The dashboard needs to be saved at least once before you can test an alert rule",
"requestParameters": null,
"responseElements": null,
"eventID": "7094644d-8230-4774-a092-8a128eb6dec9",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:39.622607860Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "test",
"resources": [
{
"ID": 0,
"type": "panel"
}
],
"requestUri": "",
"request": {},
"result": {
"statusType": "failure",
"statusCode": "400",
"failureMessage": "The dashboard needs to be saved at least once before you test an alert rule"
},
"ipAddress": "192.0.2.0, 10.0.42.208",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST /api/alert-notifications**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:40Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.0",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "1ce099b3-c427-4338-9f42-d38d1ef64efe",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:40.888295790Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "alert-notification"
}
],
"requestUri": "",
"request": {
"body": "{\"name\":\"alert notification name\",\"type\":\"Slack\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.0",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API PUT /api/alert-notifications/uid/:uid**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:42Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "update",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "cebfeb38-5007-495c-bd29-c8077797acac",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:42.792652648Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "update",
"resources": [
{
"ID": 0,
"type": "alert-notification"
}
],
"requestUri": "",
"request": {
"params": {
":uid": "WvDWDSinz"
},
"body": "{\"name\":\"DIFFERENT alert notification name\",\"type\":\"AWS SNS\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST /api/annotations**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:45Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "13bf3bef-966c-4913-a760-ade365a4a08f",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:45.394513179Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "annotation"
}
],
"requestUri": "",
"request": {
"body": "{\"dashboardId\":36,\"panelId\":2,\"tags\":[\"tag1\",\"tag2\"],\"what\":\"Event Name\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API DELETE /api/dashboards/uid/:uid**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:17:09Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "delete",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.7",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "d6ad9134-5fbc-403c-a76d-4ed9a81065b6",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:17:09.200112003Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "delete",
"resources": [
{
"ID": 0,
"type": "dashboard"
}
],
"requestUri": "",
"request": {
"params": {
":uid": "GLzWvIi7z"
}
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.7",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API PUT /api/datasources/:datasourceId**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:36Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "update",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,10.0.108.94",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "92877483-bdf6-44f5-803e-1ac8ad997113",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:36.918660585Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "update",
"resources": [
{
"ID": 0,
"type": "datasource"
}
],
"requestUri": "",
"request": {
"params": {
":id": "108"
},
"body": "{\"access\":\"proxy\",\"basicAuth\":false,\"name\":\"test_amp_datasource_NEW_name\",\"type\":\"Amazon Managed Prometheus\",\"url\":\"http://amp.amazonaws.com\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,10.0.108.94",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API DELETE /api/teams/:teamId/groups/:groupId**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:17:07Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "delete",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "b41d3967-daab-44d1-994a-a437556add82",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:17:07.296142539Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "delete",
"resources": [
{
"ID": 0,
"type": "team"
}
],
"requestUri": "",
"request": {
"params": {
":groupId": "cn=editors,ou=groups,dc=grafana,dc=org",
":teamId": "35"
}
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API PUT /api/folders/:uid**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:56Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "update",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"errorCode": "412",
"errorMessage": "the folder has been changed by someone else",
"requestParameters": null,
"responseElements": null,
"eventID": "414c98c8-aa53-45e4-940d-bea55716eaf6",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:56.382646826Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "update",
"resources": [
{
"ID": 0,
"type": "folder"
}
],
"requestUri": "",
"request": {
"params": {
":uid": "lnsZvSi7z"
},
"body": "{\"title\":\"NEW Folder Name\"}"
},
"result": {
"statusType": "failure",
"statusCode": "412",
"failureMessage": "the folder has been changed by someone else"
},
"ipAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST /api/teams**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:17:02Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,10.0.40.206",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "8d40bd79-76a8-490c-b7bb-74205253b707",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:17:02.845022379Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "team"
}
],
"requestUri": "",
"request": {
"body": "{\"name\":\"TeamName\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,10.0.40.206",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```