本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
追蹤是一種組態,能讓事件以日誌檔案的形式交付到您指定的 Amazon S3 儲存貯體。CloudTrail 日誌檔案包含一或多個日誌專案。一個事件為任何來源提出的單一請求,並包含請求動作、請求的日期和時間、請求參數等資訊。CloudTrail 日誌檔並非依公有 API 呼叫的堆疊追蹤排序,因此不會以任何特定順序出現。
以下範例顯示展示 AssociateFleet
事件的 CloudTrail 日誌項目。
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AIDACKCEVSQ6C2EXAMPLE:janeroe",
"arn": "arn:aws:sts:: 123456789012:assumed-role/Admin/janeroe",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2019-03-12T06:41:50Z"
},
"sessionIssuer": {
"type": "Role",
"principalId": "AIDACKCEVSQ6C2EXAMPLE",
"arn": "arn:aws:iam:: 123456789012:role/Admin",
"accountId": "123456789012",
"userName": "Admin"
}
}
},
"eventTime": "2019-03-12T06:58:09Z",
"eventSource": "appstream.amazonaws.com",
"eventName": "AssociateFleet",
"awsRegion": "us-east-1",
"sourceIPAddress": "198.51.100.15",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36",
"requestParameters": {
"fleetName": "ExampleFleet1",
"stackName": "ExampleStack1"
},
"responseElements": null,
"requestID": "3210a159-4494-11e9-8017-873084baf125",
"eventID": "a6fbde60-a55a-46fe-87d4-89ead558dffd",
"eventType": "AwsApiCall",
"recipientAccountId": "123456789012"
}
以下範例顯示的 CloudTrail 日誌項目,展示了使用 AppStream 2.0 映像建置器建立映像時的 CreateImage
事件。
{
"eventVersion": "1.05",
"userIdentity": {
"arn": "arn:aws:appstream:us-east-1: 123456789012:image-builder/ExampleImageBuilder",
"accountId": "123456789012"
},
"eventTime": "2019-03-21T22:32:05Z",
"eventSource": "appstream.amazonaws.com",
"eventName": "CreateImage",
"awsRegion": "us-east-1",
"requestParameters": null,
"responseElements": null,
"eventID": "12b2d6e2-c9a9-402e-8886-2c388d3df610",
"readOnly": false,
"eventType": "AwsServiceEvent",
"recipientAccountId": "123456789012",
"serviceEventDetails": {
"ImageName": "ExampleImage1",
"ImagePlatform": "WINDOWS",
"PublicBaseImageReleasedDate": "Tue Jan 15 22:19:56 UTC 2019",
"ImageDisPlayName": "Example Image 1",
"ImageBuilderSupported": "True",
"ImageCreatedTime": "Thu Mar 21 22:32:05 UTC 2019",
"ImageDescription": "Example image for testing",
"ImageState": "PENDING"
}
}