Advertisement
Guest User

Untitled

a guest
Sep 20th, 2017
466
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 113.82 KB | None | 0 0
  1. {
  2. "Records": [
  3. {
  4. "eventVersion": "1.05",
  5. "userIdentity": {
  6. "type": "IAMUser",
  7. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  8. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  9. "accountId": "836073662699",
  10. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  11. "userName": "svc-lookglass-prd"
  12. },
  13. "eventTime": "2017-09-19T23:55:08Z",
  14. "eventSource": "ec2.amazonaws.com",
  15. "eventName": "DescribeSpotInstanceRequests",
  16. "awsRegion": "us-east-1",
  17. "sourceIPAddress": "34.204.248.185",
  18. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  19. "requestParameters": {
  20. "spotInstanceRequestIdSet": {},
  21. "filterSet": {}
  22. },
  23. "responseElements": null,
  24. "requestID": "68ff7fb1-67fd-4ee8-8aef-278c40b935f3",
  25. "eventID": "b5775a7a-660e-4562-b807-35c449036725",
  26. "eventType": "AwsApiCall",
  27. "recipientAccountId": "836073662699"
  28. },
  29. {
  30. "eventVersion": "1.05",
  31. "userIdentity": {
  32. "type": "IAMUser",
  33. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  34. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  35. "accountId": "836073662699",
  36. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  37. "userName": "svc-lookglass-prd"
  38. },
  39. "eventTime": "2017-09-19T23:55:07Z",
  40. "eventSource": "ec2.amazonaws.com",
  41. "eventName": "DescribeInstances",
  42. "awsRegion": "us-east-1",
  43. "sourceIPAddress": "34.204.248.185",
  44. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  45. "requestParameters": {
  46. "instancesSet": {},
  47. "filterSet": {}
  48. },
  49. "responseElements": null,
  50. "requestID": "af401505-ebf2-48ee-93b3-a7a966e3fce7",
  51. "eventID": "961c87f9-66c2-4576-9c60-a46b99a28a64",
  52. "eventType": "AwsApiCall",
  53. "recipientAccountId": "836073662699"
  54. },
  55. {
  56. "eventVersion": "1.05",
  57. "userIdentity": {
  58. "type": "IAMUser",
  59. "principalId": "AIDAJE4OISGTZNKQGSORC",
  60. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  61. "accountId": "836073662699",
  62. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  63. "userName": "DizzyNinja"
  64. },
  65. "eventTime": "2017-09-19T23:54:09Z",
  66. "eventSource": "ec2.amazonaws.com",
  67. "eventName": "DescribeInstances",
  68. "awsRegion": "us-east-1",
  69. "sourceIPAddress": "52.6.110.130",
  70. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  71. "requestParameters": {
  72. "instancesSet": {},
  73. "filterSet": {}
  74. },
  75. "responseElements": null,
  76. "requestID": "5cb5c1e8-74aa-4cda-b026-2691c1d40b50",
  77. "eventID": "107e04dc-c920-4c43-ba97-d70d40456efc",
  78. "eventType": "AwsApiCall",
  79. "recipientAccountId": "836073662699"
  80. },
  81. {
  82. "eventVersion": "1.05",
  83. "userIdentity": {
  84. "type": "IAMUser",
  85. "principalId": "AIDAJYSBN46JXB376C3CE",
  86. "arn": "arn:aws:iam::836073662699:user/NOC",
  87. "accountId": "836073662699",
  88. "accessKeyId": "AKIAI3SJKEHVH27SONIQ",
  89. "userName": "NOC"
  90. },
  91. "eventTime": "2017-09-19T23:55:19Z",
  92. "eventSource": "ec2.amazonaws.com",
  93. "eventName": "DescribeInstances",
  94. "awsRegion": "us-east-1",
  95. "sourceIPAddress": "34.196.194.146",
  96. "userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
  97. "requestParameters": {
  98. "instancesSet": {},
  99. "filterSet": {}
  100. },
  101. "responseElements": null,
  102. "requestID": "b75bfc95-3f52-476e-87c4-733360c7999c",
  103. "eventID": "614a56b9-d322-409e-9be6-862b62d5ced8",
  104. "eventType": "AwsApiCall",
  105. "recipientAccountId": "836073662699"
  106. },
  107. {
  108. "eventVersion": "1.05",
  109. "userIdentity": {
  110. "type": "IAMUser",
  111. "principalId": "AIDAJE4OISGTZNKQGSORC",
  112. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  113. "accountId": "836073662699",
  114. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  115. "userName": "DizzyNinja"
  116. },
  117. "eventTime": "2017-09-19T23:55:09Z",
  118. "eventSource": "ec2.amazonaws.com",
  119. "eventName": "DescribeInstances",
  120. "awsRegion": "us-east-1",
  121. "sourceIPAddress": "52.6.110.130",
  122. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  123. "requestParameters": {
  124. "instancesSet": {},
  125. "filterSet": {}
  126. },
  127. "responseElements": null,
  128. "requestID": "6a7caf9a-1e06-406b-bc38-9d361afdb33c",
  129. "eventID": "c1ff6765-16c6-423e-a2e5-d1a092104c27",
  130. "eventType": "AwsApiCall",
  131. "recipientAccountId": "836073662699"
  132. },
  133. {
  134. "eventVersion": "1.04",
  135. "userIdentity": {
  136. "type": "IAMUser",
  137. "principalId": "AIDAJYSBN46JXB376C3CE",
  138. "arn": "arn:aws:iam::836073662699:user/NOC",
  139. "accountId": "836073662699",
  140. "accessKeyId": "AKIAI3SJKEHVH27SONIQ",
  141. "userName": "NOC"
  142. },
  143. "eventTime": "2017-09-19T23:55:03Z",
  144. "eventSource": "rds.amazonaws.com",
  145. "eventName": "DescribeDBInstances",
  146. "awsRegion": "us-east-1",
  147. "sourceIPAddress": "34.196.194.146",
  148. "userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
  149. "requestParameters": null,
  150. "responseElements": null,
  151. "requestID": "f424313f-9d95-11e7-8a4b-ef4f4eb3f458",
  152. "eventID": "74ad1924-2ff1-4008-a4b1-adf8d3646795",
  153. "eventType": "AwsApiCall",
  154. "recipientAccountId": "836073662699"
  155. },
  156. {
  157. "eventVersion": "1.05",
  158. "userIdentity": {
  159. "type": "IAMUser",
  160. "principalId": "AIDAJE4OISGTZNKQGSORC",
  161. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  162. "accountId": "836073662699",
  163. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  164. "userName": "DizzyNinja"
  165. },
  166. "eventTime": "2017-09-19T23:53:22Z",
  167. "eventSource": "ec2.amazonaws.com",
  168. "eventName": "DescribeInstances",
  169. "awsRegion": "us-east-1",
  170. "sourceIPAddress": "54.173.54.246",
  171. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  172. "requestParameters": {
  173. "instancesSet": {},
  174. "filterSet": {}
  175. },
  176. "responseElements": null,
  177. "requestID": "93c2fda7-5505-448d-b04d-e677a3601059",
  178. "eventID": "be16be30-0e51-4104-b837-44e7d406a781",
  179. "eventType": "AwsApiCall",
  180. "recipientAccountId": "836073662699"
  181. },
  182. {
  183. "eventVersion": "1.05",
  184. "userIdentity": {
  185. "type": "IAMUser",
  186. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  187. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  188. "accountId": "836073662699",
  189. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  190. "userName": "svc-lookglass-prd"
  191. },
  192. "eventTime": "2017-09-19T23:54:08Z",
  193. "eventSource": "ec2.amazonaws.com",
  194. "eventName": "DescribeInstances",
  195. "awsRegion": "us-east-1",
  196. "sourceIPAddress": "34.204.248.185",
  197. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  198. "requestParameters": {
  199. "instancesSet": {},
  200. "filterSet": {}
  201. },
  202. "responseElements": null,
  203. "requestID": "ceb96340-70de-4d43-88d1-de29e55c9534",
  204. "eventID": "ef14bf3a-4420-4f78-8e71-d46671a4505a",
  205. "eventType": "AwsApiCall",
  206. "recipientAccountId": "836073662699"
  207. },
  208. {
  209. "eventVersion": "1.05",
  210. "userIdentity": {
  211. "type": "IAMUser",
  212. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  213. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  214. "accountId": "836073662699",
  215. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  216. "userName": "svc-lookglass-prd"
  217. },
  218. "eventTime": "2017-09-19T23:54:08Z",
  219. "eventSource": "ec2.amazonaws.com",
  220. "eventName": "DescribeSpotInstanceRequests",
  221. "awsRegion": "us-east-1",
  222. "sourceIPAddress": "34.204.248.185",
  223. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  224. "requestParameters": {
  225. "spotInstanceRequestIdSet": {},
  226. "filterSet": {}
  227. },
  228. "responseElements": null,
  229. "requestID": "c83a10ee-3064-4fbe-806b-6a006a6c2ca9",
  230. "eventID": "a8f9f220-78d5-4997-8d42-886fb6bc7a72",
  231. "eventType": "AwsApiCall",
  232. "recipientAccountId": "836073662699"
  233. },
  234. {
  235. "eventVersion": "1.05",
  236. "userIdentity": {
  237. "type": "IAMUser",
  238. "principalId": "AIDAJE4OISGTZNKQGSORC",
  239. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  240. "accountId": "836073662699",
  241. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  242. "userName": "DizzyNinja"
  243. },
  244. "eventTime": "2017-09-19T23:55:08Z",
  245. "eventSource": "ec2.amazonaws.com",
  246. "eventName": "DescribeInstances",
  247. "awsRegion": "us-east-1",
  248. "sourceIPAddress": "54.173.51.226",
  249. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  250. "requestParameters": {
  251. "instancesSet": {},
  252. "filterSet": {}
  253. },
  254. "responseElements": null,
  255. "requestID": "4e9ce749-43d1-46c4-b7b1-2b681e478ecb",
  256. "eventID": "b171d28a-76e8-413d-ac40-5cccd0f220d2",
  257. "eventType": "AwsApiCall",
  258. "recipientAccountId": "836073662699"
  259. },
  260. {
  261. "eventVersion": "1.05",
  262. "userIdentity": {
  263. "type": "IAMUser",
  264. "principalId": "AIDAJYSBN46JXB376C3CE",
  265. "arn": "arn:aws:iam::836073662699:user/NOC",
  266. "accountId": "836073662699",
  267. "accessKeyId": "AKIAI3SJKEHVH27SONIQ",
  268. "userName": "NOC"
  269. },
  270. "eventTime": "2017-09-19T23:55:02Z",
  271. "eventSource": "ec2.amazonaws.com",
  272. "eventName": "DescribeInstances",
  273. "awsRegion": "us-east-1",
  274. "sourceIPAddress": "34.196.194.146",
  275. "userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
  276. "requestParameters": {
  277. "instancesSet": {},
  278. "filterSet": {}
  279. },
  280. "responseElements": null,
  281. "requestID": "9dffec82-e9bc-4a6a-ab58-539a98df8a84",
  282. "eventID": "81c469f9-2a32-4f4b-9c66-b5f26d50681f",
  283. "eventType": "AwsApiCall",
  284. "recipientAccountId": "836073662699"
  285. },
  286. {
  287. "eventVersion": "1.05",
  288. "userIdentity": {
  289. "type": "IAMUser",
  290. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  291. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  292. "accountId": "836073662699",
  293. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  294. "userName": "svc-lookglass-prd"
  295. },
  296. "eventTime": "2017-09-19T23:53:08Z",
  297. "eventSource": "ec2.amazonaws.com",
  298. "eventName": "DescribeInstances",
  299. "awsRegion": "us-east-1",
  300. "sourceIPAddress": "34.204.248.185",
  301. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  302. "requestParameters": {
  303. "instancesSet": {},
  304. "filterSet": {}
  305. },
  306. "responseElements": null,
  307. "requestID": "f6333f0f-68e1-4926-8400-6ce9066040e8",
  308. "eventID": "2f6554dd-aef4-4af8-9a18-e966a4fd5b96",
  309. "eventType": "AwsApiCall",
  310. "recipientAccountId": "836073662699"
  311. },
  312. {
  313. "eventVersion": "1.05",
  314. "userIdentity": {
  315. "type": "IAMUser",
  316. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  317. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  318. "accountId": "836073662699",
  319. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  320. "userName": "svc-lookglass-prd"
  321. },
  322. "eventTime": "2017-09-19T23:53:08Z",
  323. "eventSource": "ec2.amazonaws.com",
  324. "eventName": "DescribeSpotInstanceRequests",
  325. "awsRegion": "us-east-1",
  326. "sourceIPAddress": "34.204.248.185",
  327. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  328. "requestParameters": {
  329. "spotInstanceRequestIdSet": {},
  330. "filterSet": {}
  331. },
  332. "responseElements": null,
  333. "requestID": "4b869d39-e2d8-4665-ad5a-c2f1ea0db2a2",
  334. "eventID": "dff84063-ee46-4e1a-9978-df69b816f9c9",
  335. "eventType": "AwsApiCall",
  336. "recipientAccountId": "836073662699"
  337. },
  338. {
  339. "eventVersion": "1.05",
  340. "userIdentity": {
  341. "type": "IAMUser",
  342. "principalId": "AIDAJE4OISGTZNKQGSORC",
  343. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  344. "accountId": "836073662699",
  345. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  346. "userName": "DizzyNinja"
  347. },
  348. "eventTime": "2017-09-19T23:55:43Z",
  349. "eventSource": "ec2.amazonaws.com",
  350. "eventName": "DescribeInstances",
  351. "awsRegion": "us-east-1",
  352. "sourceIPAddress": "54.172.37.251",
  353. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  354. "requestParameters": {
  355. "instancesSet": {},
  356. "filterSet": {}
  357. },
  358. "responseElements": null,
  359. "requestID": "e83641e9-f4b6-4de9-8961-5f9583ae2cd6",
  360. "eventID": "1a1ca75d-2195-4d32-b002-180818fbb658",
  361. "eventType": "AwsApiCall",
  362. "recipientAccountId": "836073662699"
  363. },
  364. {
  365. "eventVersion": "1.05",
  366. "userIdentity": {
  367. "type": "AWSService",
  368. "invokedBy": "ec2.amazonaws.com"
  369. },
  370. "eventTime": "2017-09-19T23:53:05Z",
  371. "eventSource": "sts.amazonaws.com",
  372. "eventName": "AssumeRole",
  373. "awsRegion": "us-east-1",
  374. "sourceIPAddress": "ec2.amazonaws.com",
  375. "userAgent": "ec2.amazonaws.com",
  376. "requestParameters": {
  377. "roleSessionName": "i-062cbc1e856960883",
  378. "roleArn": "arn:aws:iam::836073662699:role/DSS"
  379. },
  380. "responseElements": {
  381. "credentials": {
  382. "sessionToken": "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\\u003d",
  383. "accessKeyId": "ASIAJAPGUEQBDWVPKOXA",
  384. "expiration": "Sep 20, 2017 6:28:08 AM"
  385. }
  386. },
  387. "requestID": "5cfb0110-6151-4f49-982a-c3fa286ccdec",
  388. "eventID": "e450db2c-0182-4929-9e37-e5c092eb80fe",
  389. "resources": [
  390. {
  391. "ARN": "arn:aws:iam::836073662699:role/DSS",
  392. "accountId": "836073662699",
  393. "type": "AWS::IAM::Role"
  394. }
  395. ],
  396. "eventType": "AwsApiCall",
  397. "recipientAccountId": "836073662699",
  398. "sharedEventID": "2184adf8-6d41-40c1-9da9-caf8cb045a54"
  399. },
  400. {
  401. "eventVersion": "1.05",
  402. "userIdentity": {
  403. "type": "AWSService",
  404. "invokedBy": "ec2.amazonaws.com"
  405. },
  406. "eventTime": "2017-09-19T23:53:51Z",
  407. "eventSource": "sts.amazonaws.com",
  408. "eventName": "AssumeRole",
  409. "awsRegion": "us-east-1",
  410. "sourceIPAddress": "ec2.amazonaws.com",
  411. "userAgent": "ec2.amazonaws.com",
  412. "requestParameters": {
  413. "roleSessionName": "i-411d17b9",
  414. "roleArn": "arn:aws:iam::836073662699:role/DSS"
  415. },
  416. "responseElements": {
  417. "credentials": {
  418. "sessionToken": "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\\u003d",
  419. "accessKeyId": "ASIAIMN4QIGECUHU66IA",
  420. "expiration": "Sep 20, 2017 6:28:57 AM"
  421. }
  422. },
  423. "requestID": "29d16d43-81d8-471f-ba74-e67ec92dc420",
  424. "eventID": "15005195-e6a7-46e4-bb10-bc1481fce417",
  425. "resources": [
  426. {
  427. "ARN": "arn:aws:iam::836073662699:role/DSS",
  428. "accountId": "836073662699",
  429. "type": "AWS::IAM::Role"
  430. }
  431. ],
  432. "eventType": "AwsApiCall",
  433. "recipientAccountId": "836073662699",
  434. "sharedEventID": "ca08ebf7-bad3-42ae-bbb5-30546f1b9aa9"
  435. },
  436. {
  437. "eventVersion": "1.05",
  438. "userIdentity": {
  439. "type": "IAMUser",
  440. "principalId": "AIDAJE4OISGTZNKQGSORC",
  441. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  442. "accountId": "836073662699",
  443. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  444. "userName": "DizzyNinja"
  445. },
  446. "eventTime": "2017-09-19T23:53:36Z",
  447. "eventSource": "ec2.amazonaws.com",
  448. "eventName": "DescribeInstances",
  449. "awsRegion": "us-east-1",
  450. "sourceIPAddress": "54.234.33.248",
  451. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  452. "requestParameters": {
  453. "instancesSet": {},
  454. "filterSet": {}
  455. },
  456. "responseElements": null,
  457. "requestID": "16348fd7-85de-4595-8a5c-06c6f11cd46e",
  458. "eventID": "828ddfb7-dc7e-42cf-b18e-81595181dd7c",
  459. "eventType": "AwsApiCall",
  460. "recipientAccountId": "836073662699"
  461. },
  462. {
  463. "eventVersion": "1.05",
  464. "userIdentity": {
  465. "type": "IAMUser",
  466. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  467. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  468. "accountId": "836073662699",
  469. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  470. "userName": "svc-lookglass-prd"
  471. },
  472. "eventTime": "2017-09-19T23:55:08Z",
  473. "eventSource": "ec2.amazonaws.com",
  474. "eventName": "DescribeInstances",
  475. "awsRegion": "us-east-1",
  476. "sourceIPAddress": "34.204.248.185",
  477. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  478. "requestParameters": {
  479. "instancesSet": {},
  480. "filterSet": {}
  481. },
  482. "responseElements": null,
  483. "requestID": "5f2b72f0-a83a-4ea9-8fd0-97790c0fc971",
  484. "eventID": "88fc933c-0e9e-48c2-9fa2-b02a49e439a4",
  485. "eventType": "AwsApiCall",
  486. "recipientAccountId": "836073662699"
  487. },
  488. {
  489. "eventVersion": "1.05",
  490. "userIdentity": {
  491. "type": "IAMUser",
  492. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  493. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  494. "accountId": "836073662699",
  495. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  496. "userName": "svc-lookglass-prd"
  497. },
  498. "eventTime": "2017-09-19T23:55:08Z",
  499. "eventSource": "ec2.amazonaws.com",
  500. "eventName": "DescribeSpotInstanceRequests",
  501. "awsRegion": "us-east-1",
  502. "sourceIPAddress": "34.204.248.185",
  503. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  504. "requestParameters": {
  505. "spotInstanceRequestIdSet": {},
  506. "filterSet": {}
  507. },
  508. "responseElements": null,
  509. "requestID": "064b8ba3-9880-43e2-8465-8f9238cdf592",
  510. "eventID": "2f189898-d7b2-4913-bed3-c287390d0a54",
  511. "eventType": "AwsApiCall",
  512. "recipientAccountId": "836073662699"
  513. },
  514. {
  515. "eventVersion": "1.05",
  516. "userIdentity": {
  517. "type": "IAMUser",
  518. "principalId": "AIDAJE4OISGTZNKQGSORC",
  519. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  520. "accountId": "836073662699",
  521. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  522. "userName": "DizzyNinja"
  523. },
  524. "eventTime": "2017-09-19T23:53:34Z",
  525. "eventSource": "ec2.amazonaws.com",
  526. "eventName": "DescribeInstances",
  527. "awsRegion": "us-east-1",
  528. "sourceIPAddress": "54.225.59.80",
  529. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  530. "requestParameters": {
  531. "instancesSet": {},
  532. "filterSet": {}
  533. },
  534. "responseElements": null,
  535. "requestID": "dfe3eb41-f6f0-48ca-80a2-5f132ca729df",
  536. "eventID": "81a338a0-b8bd-4054-931a-ce831255605f",
  537. "eventType": "AwsApiCall",
  538. "recipientAccountId": "836073662699"
  539. },
  540. {
  541. "eventVersion": "1.04",
  542. "userIdentity": {
  543. "type": "IAMUser",
  544. "principalId": "AIDAILUTBF5H2JPTYJPAM",
  545. "arn": "arn:aws:iam::836073662699:user/jerry.hutchison@rightside.co",
  546. "accountId": "836073662699",
  547. "accessKeyId": "ASIAIN2CLER45LBXZ4HA",
  548. "userName": "jerry.hutchison@rightside.co",
  549. "sessionContext": {
  550. "attributes": {
  551. "mfaAuthenticated": "false",
  552. "creationDate": "2017-09-19T14:11:46Z"
  553. }
  554. },
  555. "invokedBy": "signin.amazonaws.com"
  556. },
  557. "eventTime": "2017-09-19T23:53:22Z",
  558. "eventSource": "redshift.amazonaws.com",
  559. "eventName": "DescribeClusters",
  560. "awsRegion": "us-east-1",
  561. "sourceIPAddress": "24.18.192.230",
  562. "userAgent": "signin.amazonaws.com",
  563. "requestParameters": null,
  564. "responseElements": {
  565. "clusters": [
  566. {
  567. "nodeType": "dc1.large",
  568. "preferredMaintenanceWindow": "fri:09:00-fri:09:30",
  569. "clusterStatus": "available",
  570. "clusterCreateTime": "May 4, 2015 4:18:03 PM",
  571. "enhancedVpcRouting": false,
  572. "endpoint": {
  573. "port": 5439,
  574. "address": "rightside-dw-r.cwisduywvaeb.us-east-1.redshift.amazonaws.com"
  575. },
  576. "masterUsername": "masteruser",
  577. "clusterSecurityGroups": [
  578. {
  579. "status": "active",
  580. "clusterSecurityGroupName": "default"
  581. },
  582. {
  583. "status": "active",
  584. "clusterSecurityGroupName": "access"
  585. },
  586. {
  587. "status": "active",
  588. "clusterSecurityGroupName": "access1"
  589. },
  590. {
  591. "status": "active",
  592. "clusterSecurityGroupName": "access2"
  593. },
  594. {
  595. "status": "active",
  596. "clusterSecurityGroupName": "proxy-vm"
  597. }
  598. ],
  599. "pendingModifiedValues": {},
  600. "dBName": "rightsidedw",
  601. "availabilityZone": "us-east-1b",
  602. "clusterVersion": "1.0",
  603. "encrypted": false,
  604. "clusterPublicKey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMg6xK+JtmKZWahr0Gc+cKZKjwa1KakBndc3r/NclrFP/sfFrBI3iHbaT0Jf8nbtyFDjceI3qD++9hcDwZwkiedecIAKic4eIum953ubE3DU32+J5E826C18mSzhypHycgP6y3MeoClMhWkFJZVdffHo8k1uoY6uGyJ695n7gS/zicX7KCloItqIrLKIcz2qwkqnd7FNcDjSBGF/3cA6TX5zngps7uhZx+qTEe2onAjsvUh+QH4pHXhQL4GqTZ6rE2Y/wv0v+VFYbMm+izWsLoSs3kpdw428WCYpdGia2MA+yCJmLdiuTri4IU5Fty6lhZ9NF++4p5YjXxwpET4Rg5 Amazon-Redshift\n",
  605. "clusterNodes": [
  606. {
  607. "publicIPAddress": "184.73.123.149",
  608. "nodeRole": "LEADER",
  609. "privateIPAddress": "10.234.108.227"
  610. },
  611. {
  612. "publicIPAddress": "23.22.54.122",
  613. "nodeRole": "COMPUTE-0",
  614. "privateIPAddress": "10.165.108.240"
  615. },
  616. {
  617. "publicIPAddress": "54.166.26.205",
  618. "nodeRole": "COMPUTE-1",
  619. "privateIPAddress": "10.140.157.70"
  620. },
  621. {
  622. "publicIPAddress": "54.146.178.189",
  623. "nodeRole": "COMPUTE-2",
  624. "privateIPAddress": "10.178.204.229"
  625. },
  626. {
  627. "publicIPAddress": "174.129.184.209",
  628. "nodeRole": "COMPUTE-3",
  629. "privateIPAddress": "10.142.202.72"
  630. },
  631. {
  632. "publicIPAddress": "54.242.1.196",
  633. "nodeRole": "COMPUTE-4",
  634. "privateIPAddress": "10.11.169.99"
  635. },
  636. {
  637. "publicIPAddress": "174.129.65.131",
  638. "nodeRole": "COMPUTE-5",
  639. "privateIPAddress": "10.63.62.94"
  640. },
  641. {
  642. "publicIPAddress": "54.205.164.200",
  643. "nodeRole": "COMPUTE-6",
  644. "privateIPAddress": "10.37.164.97"
  645. },
  646. {
  647. "publicIPAddress": "54.242.121.142",
  648. "nodeRole": "COMPUTE-7",
  649. "privateIPAddress": "10.142.206.165"
  650. }
  651. ],
  652. "publiclyAccessible": true,
  653. "tags": [
  654. {
  655. "value": "edw-prod",
  656. "key": "Platform"
  657. },
  658. {
  659. "value": "MainRedshift",
  660. "key": "Name"
  661. }
  662. ],
  663. "clusterParameterGroups": [
  664. {
  665. "parameterGroupName": "default.redshift-1.0",
  666. "parameterApplyStatus": "in-sync"
  667. }
  668. ],
  669. "allowVersionUpgrade": true,
  670. "clusterRevisionNumber": "1430",
  671. "automatedSnapshotRetentionPeriod": 1,
  672. "numberOfNodes": 8,
  673. "vpcSecurityGroups": [],
  674. "iamRoles": [],
  675. "clusterIdentifier": "rightside-dw-r"
  676. }
  677. ]
  678. },
  679. "requestID": "b81cc3ab-9d95-11e7-97aa-b5ef59890d94",
  680. "eventID": "25d1c54d-d430-42b8-a09c-7a7b1e1f3370",
  681. "eventType": "AwsApiCall",
  682. "recipientAccountId": "836073662699"
  683. },
  684. {
  685. "eventVersion": "1.05",
  686. "userIdentity": {
  687. "type": "IAMUser",
  688. "principalId": "AIDAJE4OISGTZNKQGSORC",
  689. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  690. "accountId": "836073662699",
  691. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  692. "userName": "DizzyNinja"
  693. },
  694. "eventTime": "2017-09-19T23:54:15Z",
  695. "eventSource": "ec2.amazonaws.com",
  696. "eventName": "DescribeInstances",
  697. "awsRegion": "us-east-1",
  698. "sourceIPAddress": "34.195.32.205",
  699. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  700. "requestParameters": {
  701. "instancesSet": {},
  702. "filterSet": {}
  703. },
  704. "responseElements": null,
  705. "requestID": "53ef6e78-f758-4edb-8b68-016572c0d5bd",
  706. "eventID": "06f5ddc4-f2b1-4f21-8f13-1cdb5fca1858",
  707. "eventType": "AwsApiCall",
  708. "recipientAccountId": "836073662699"
  709. },
  710. {
  711. "eventVersion": "1.05",
  712. "userIdentity": {
  713. "type": "IAMUser",
  714. "principalId": "AIDAJE4OISGTZNKQGSORC",
  715. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  716. "accountId": "836073662699",
  717. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  718. "userName": "DizzyNinja"
  719. },
  720. "eventTime": "2017-09-19T23:54:03Z",
  721. "eventSource": "ec2.amazonaws.com",
  722. "eventName": "DescribeInstances",
  723. "awsRegion": "us-east-1",
  724. "sourceIPAddress": "54.225.53.250",
  725. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  726. "requestParameters": {
  727. "instancesSet": {},
  728. "filterSet": {}
  729. },
  730. "responseElements": null,
  731. "requestID": "a8ebd697-9621-464f-872f-2111a45f8d74",
  732. "eventID": "7d1d6c51-23fc-4d84-88d0-95c69a3c6783",
  733. "eventType": "AwsApiCall",
  734. "recipientAccountId": "836073662699"
  735. },
  736. {
  737. "eventVersion": "1.05",
  738. "userIdentity": {
  739. "type": "IAMUser",
  740. "principalId": "AIDAJE4OISGTZNKQGSORC",
  741. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  742. "accountId": "836073662699",
  743. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  744. "userName": "DizzyNinja"
  745. },
  746. "eventTime": "2017-09-19T23:55:23Z",
  747. "eventSource": "ec2.amazonaws.com",
  748. "eventName": "DescribeInstances",
  749. "awsRegion": "us-east-1",
  750. "sourceIPAddress": "54.165.160.164",
  751. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  752. "requestParameters": {
  753. "instancesSet": {},
  754. "filterSet": {}
  755. },
  756. "responseElements": null,
  757. "requestID": "6d879f98-ddc1-4bf3-8c7d-81a8f7435982",
  758. "eventID": "db380f44-f573-44b3-992b-e87cd42088e0",
  759. "eventType": "AwsApiCall",
  760. "recipientAccountId": "836073662699"
  761. },
  762. {
  763. "eventVersion": "1.05",
  764. "userIdentity": {
  765. "type": "AWSService",
  766. "invokedBy": "ec2.amazonaws.com"
  767. },
  768. "eventTime": "2017-09-19T23:53:03Z",
  769. "eventSource": "sts.amazonaws.com",
  770. "eventName": "AssumeRole",
  771. "awsRegion": "us-east-1",
  772. "sourceIPAddress": "ec2.amazonaws.com",
  773. "userAgent": "ec2.amazonaws.com",
  774. "requestParameters": {
  775. "roleSessionName": "i-09d1f8453027f1f18",
  776. "roleArn": "arn:aws:iam::836073662699:role/DSS"
  777. },
  778. "responseElements": {
  779. "credentials": {
  780. "sessionToken": "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\\u003d",
  781. "accessKeyId": "ASIAIXK6O2YOLDHEKUSA",
  782. "expiration": "Sep 20, 2017 6:18:39 AM"
  783. }
  784. },
  785. "requestID": "a5f5e824-9900-475f-97e7-4e8f0cdfc83f",
  786. "eventID": "ba0ac52d-63f5-4414-91f3-a8a541b89844",
  787. "resources": [
  788. {
  789. "ARN": "arn:aws:iam::836073662699:role/DSS",
  790. "accountId": "836073662699",
  791. "type": "AWS::IAM::Role"
  792. }
  793. ],
  794. "eventType": "AwsApiCall",
  795. "recipientAccountId": "836073662699",
  796. "sharedEventID": "360c87e6-e5e8-48a2-820d-7b54659daff4"
  797. },
  798. {
  799. "eventVersion": "1.05",
  800. "userIdentity": {
  801. "type": "IAMUser",
  802. "principalId": "AIDAJE4OISGTZNKQGSORC",
  803. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  804. "accountId": "836073662699",
  805. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  806. "userName": "DizzyNinja"
  807. },
  808. "eventTime": "2017-09-19T23:54:05Z",
  809. "eventSource": "ec2.amazonaws.com",
  810. "eventName": "DescribeInstances",
  811. "awsRegion": "us-east-1",
  812. "sourceIPAddress": "107.22.20.81",
  813. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  814. "requestParameters": {
  815. "instancesSet": {},
  816. "filterSet": {}
  817. },
  818. "responseElements": null,
  819. "requestID": "4075631c-ed42-4ebf-a18a-7bd7435a6ada",
  820. "eventID": "6691b876-c9c8-4c71-99ff-1aa4fc1683d7",
  821. "eventType": "AwsApiCall",
  822. "recipientAccountId": "836073662699"
  823. },
  824. {
  825. "eventVersion": "1.05",
  826. "userIdentity": {
  827. "type": "IAMUser",
  828. "principalId": "AIDAJE4OISGTZNKQGSORC",
  829. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  830. "accountId": "836073662699",
  831. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  832. "userName": "DizzyNinja"
  833. },
  834. "eventTime": "2017-09-19T23:54:54Z",
  835. "eventSource": "ec2.amazonaws.com",
  836. "eventName": "DescribeInstances",
  837. "awsRegion": "us-east-1",
  838. "sourceIPAddress": "34.197.60.114",
  839. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  840. "requestParameters": {
  841. "instancesSet": {},
  842. "filterSet": {}
  843. },
  844. "responseElements": null,
  845. "requestID": "e12202fb-3a11-4d1f-aed1-a6667e8bca8e",
  846. "eventID": "8f80fef9-8006-467c-9c02-8e6f69ec9a58",
  847. "eventType": "AwsApiCall",
  848. "recipientAccountId": "836073662699"
  849. },
  850. {
  851. "eventVersion": "1.04",
  852. "userIdentity": {
  853. "type": "IAMUser",
  854. "principalId": "AIDAJYSBN46JXB376C3CE",
  855. "arn": "arn:aws:iam::836073662699:user/NOC",
  856. "accountId": "836073662699",
  857. "accessKeyId": "AKIAI3SJKEHVH27SONIQ",
  858. "userName": "NOC"
  859. },
  860. "eventTime": "2017-09-19T23:55:19Z",
  861. "eventSource": "rds.amazonaws.com",
  862. "eventName": "DescribeDBInstances",
  863. "awsRegion": "us-east-1",
  864. "sourceIPAddress": "34.196.194.146",
  865. "userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
  866. "requestParameters": null,
  867. "responseElements": null,
  868. "requestID": "fddfa5e9-9d95-11e7-928d-25a36bd5db54",
  869. "eventID": "3c7a201f-f6e8-421e-9d0b-272cc78345ba",
  870. "eventType": "AwsApiCall",
  871. "recipientAccountId": "836073662699"
  872. },
  873. {
  874. "eventVersion": "1.05",
  875. "userIdentity": {
  876. "type": "IAMUser",
  877. "principalId": "AIDAJE4OISGTZNKQGSORC",
  878. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  879. "accountId": "836073662699",
  880. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  881. "userName": "DizzyNinja"
  882. },
  883. "eventTime": "2017-09-19T23:54:01Z",
  884. "eventSource": "ec2.amazonaws.com",
  885. "eventName": "DescribeInstances",
  886. "awsRegion": "us-east-1",
  887. "sourceIPAddress": "54.147.184.112",
  888. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  889. "requestParameters": {
  890. "instancesSet": {},
  891. "filterSet": {}
  892. },
  893. "responseElements": null,
  894. "requestID": "d51fa9c8-e8b4-4336-8673-10d625be9711",
  895. "eventID": "d12d911b-82bb-4a0f-82ca-cb694cdd40d7",
  896. "eventType": "AwsApiCall",
  897. "recipientAccountId": "836073662699"
  898. },
  899. {
  900. "eventVersion": "1.05",
  901. "userIdentity": {
  902. "type": "AssumedRole",
  903. "principalId": "AROAIY55HROFL5CKSWD4Y:AutoScalingDescribeHandlerSession",
  904. "arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AutoScalingDescribeHandlerSession",
  905. "accountId": "836073662699",
  906. "accessKeyId": "ASIAJINNFTCIIKVQAM4A",
  907. "sessionContext": {
  908. "attributes": {
  909. "mfaAuthenticated": "false",
  910. "creationDate": "2017-09-19T23:54:21Z"
  911. },
  912. "sessionIssuer": {
  913. "type": "Role",
  914. "principalId": "AROAIY55HROFL5CKSWD4Y",
  915. "arn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
  916. "accountId": "836073662699",
  917. "userName": "config-role-us-east-1"
  918. }
  919. },
  920. "invokedBy": "config.amazonaws.com"
  921. },
  922. "eventTime": "2017-09-19T23:54:21Z",
  923. "eventSource": "autoscaling.amazonaws.com",
  924. "eventName": "DescribePolicies",
  925. "awsRegion": "us-east-1",
  926. "sourceIPAddress": "config.amazonaws.com",
  927. "userAgent": "config.amazonaws.com",
  928. "requestParameters": null,
  929. "responseElements": null,
  930. "requestID": "db40473e-9d95-11e7-bbae-d56fdb59caf7",
  931. "eventID": "dfaf8756-9b1b-4f25-9be0-db13a624388c",
  932. "eventType": "AwsApiCall",
  933. "recipientAccountId": "836073662699"
  934. },
  935. {
  936. "eventVersion": "1.05",
  937. "userIdentity": {
  938. "type": "IAMUser",
  939. "principalId": "AIDAJE4OISGTZNKQGSORC",
  940. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  941. "accountId": "836073662699",
  942. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  943. "userName": "DizzyNinja"
  944. },
  945. "eventTime": "2017-09-19T23:54:22Z",
  946. "eventSource": "ec2.amazonaws.com",
  947. "eventName": "DescribeInstances",
  948. "awsRegion": "us-east-1",
  949. "sourceIPAddress": "54.173.54.246",
  950. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  951. "requestParameters": {
  952. "instancesSet": {},
  953. "filterSet": {}
  954. },
  955. "responseElements": null,
  956. "requestID": "1c979918-b2b7-478a-a615-96797525ac46",
  957. "eventID": "58fd0e27-1f0f-40a5-93a3-18970b9ded28",
  958. "eventType": "AwsApiCall",
  959. "recipientAccountId": "836073662699"
  960. },
  961. {
  962. "eventVersion": "1.05",
  963. "userIdentity": {
  964. "type": "IAMUser",
  965. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  966. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  967. "accountId": "836073662699",
  968. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  969. "userName": "svc-lookglass-prd"
  970. },
  971. "eventTime": "2017-09-19T23:54:08Z",
  972. "eventSource": "ec2.amazonaws.com",
  973. "eventName": "DescribeSpotInstanceRequests",
  974. "awsRegion": "us-east-1",
  975. "sourceIPAddress": "34.204.248.185",
  976. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  977. "requestParameters": {
  978. "spotInstanceRequestIdSet": {},
  979. "filterSet": {}
  980. },
  981. "responseElements": null,
  982. "requestID": "6d7e1b88-031b-41c1-a086-4a11d5b7db9e",
  983. "eventID": "af686bdf-6496-49c2-b5a0-236e80402565",
  984. "eventType": "AwsApiCall",
  985. "recipientAccountId": "836073662699"
  986. },
  987. {
  988. "eventVersion": "1.05",
  989. "userIdentity": {
  990. "type": "IAMUser",
  991. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  992. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  993. "accountId": "836073662699",
  994. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  995. "userName": "svc-lookglass-prd"
  996. },
  997. "eventTime": "2017-09-19T23:54:08Z",
  998. "eventSource": "ec2.amazonaws.com",
  999. "eventName": "DescribeInstances",
  1000. "awsRegion": "us-east-1",
  1001. "sourceIPAddress": "34.204.248.185",
  1002. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  1003. "requestParameters": {
  1004. "instancesSet": {},
  1005. "filterSet": {}
  1006. },
  1007. "responseElements": null,
  1008. "requestID": "a8fec77e-dc75-4e14-b9d7-2070a68534b9",
  1009. "eventID": "215cb12c-abb4-4441-901b-666d4ee728a7",
  1010. "eventType": "AwsApiCall",
  1011. "recipientAccountId": "836073662699"
  1012. },
  1013. {
  1014. "eventVersion": "1.05",
  1015. "userIdentity": {
  1016. "type": "IAMUser",
  1017. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1018. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1019. "accountId": "836073662699",
  1020. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1021. "userName": "DizzyNinja"
  1022. },
  1023. "eventTime": "2017-09-19T23:52:52Z",
  1024. "eventSource": "ec2.amazonaws.com",
  1025. "eventName": "DescribeInstances",
  1026. "awsRegion": "us-east-1",
  1027. "sourceIPAddress": "54.147.86.214",
  1028. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1029. "requestParameters": {
  1030. "instancesSet": {},
  1031. "filterSet": {}
  1032. },
  1033. "responseElements": null,
  1034. "requestID": "006d2164-99ef-4eb6-9cab-a7be6337049f",
  1035. "eventID": "e584af7c-17c5-4f2b-8a80-350d043929e7",
  1036. "eventType": "AwsApiCall",
  1037. "recipientAccountId": "836073662699"
  1038. },
  1039. {
  1040. "eventVersion": "1.05",
  1041. "userIdentity": {
  1042. "type": "IAMUser",
  1043. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1044. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1045. "accountId": "836073662699",
  1046. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1047. "userName": "DizzyNinja"
  1048. },
  1049. "eventTime": "2017-09-19T23:55:03Z",
  1050. "eventSource": "ec2.amazonaws.com",
  1051. "eventName": "DescribeInstances",
  1052. "awsRegion": "us-east-1",
  1053. "sourceIPAddress": "54.225.53.250",
  1054. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1055. "requestParameters": {
  1056. "instancesSet": {},
  1057. "filterSet": {}
  1058. },
  1059. "responseElements": null,
  1060. "requestID": "baed244d-2e81-4f9e-92e4-a5863bc40b59",
  1061. "eventID": "3a189b3a-e50a-4f9a-899d-ea6b0b8aff63",
  1062. "eventType": "AwsApiCall",
  1063. "recipientAccountId": "836073662699"
  1064. },
  1065. {
  1066. "eventVersion": "1.05",
  1067. "userIdentity": {
  1068. "type": "IAMUser",
  1069. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1070. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1071. "accountId": "836073662699",
  1072. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1073. "userName": "DizzyNinja"
  1074. },
  1075. "eventTime": "2017-09-19T23:55:14Z",
  1076. "eventSource": "ec2.amazonaws.com",
  1077. "eventName": "DescribeInstances",
  1078. "awsRegion": "us-east-1",
  1079. "sourceIPAddress": "34.195.32.205",
  1080. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1081. "requestParameters": {
  1082. "instancesSet": {},
  1083. "filterSet": {}
  1084. },
  1085. "responseElements": null,
  1086. "requestID": "e6f00857-5652-4d01-a13e-97fa616c25cc",
  1087. "eventID": "d1764f69-3bf1-4eb7-8390-388ebb46df15",
  1088. "eventType": "AwsApiCall",
  1089. "recipientAccountId": "836073662699"
  1090. },
  1091. {
  1092. "eventVersion": "1.05",
  1093. "userIdentity": {
  1094. "type": "IAMUser",
  1095. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1096. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1097. "accountId": "836073662699",
  1098. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1099. "userName": "DizzyNinja"
  1100. },
  1101. "eventTime": "2017-09-19T23:52:34Z",
  1102. "eventSource": "ec2.amazonaws.com",
  1103. "eventName": "DescribeInstances",
  1104. "awsRegion": "us-east-1",
  1105. "sourceIPAddress": "54.225.59.80",
  1106. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1107. "requestParameters": {
  1108. "instancesSet": {},
  1109. "filterSet": {}
  1110. },
  1111. "responseElements": null,
  1112. "requestID": "5e023d7a-a5c4-420c-a1bf-e00e825412b4",
  1113. "eventID": "dd79d267-364c-4b65-a15e-b74d3dc044a7",
  1114. "eventType": "AwsApiCall",
  1115. "recipientAccountId": "836073662699"
  1116. },
  1117. {
  1118. "eventVersion": "1.05",
  1119. "userIdentity": {
  1120. "type": "IAMUser",
  1121. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1122. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1123. "accountId": "836073662699",
  1124. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1125. "userName": "DizzyNinja"
  1126. },
  1127. "eventTime": "2017-09-19T23:54:53Z",
  1128. "eventSource": "ec2.amazonaws.com",
  1129. "eventName": "DescribeInstances",
  1130. "awsRegion": "us-east-1",
  1131. "sourceIPAddress": "54.147.86.214",
  1132. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1133. "requestParameters": {
  1134. "instancesSet": {},
  1135. "filterSet": {}
  1136. },
  1137. "responseElements": null,
  1138. "requestID": "8dc66694-42d6-4a7e-8361-2ad5923a3ad7",
  1139. "eventID": "f419373c-1657-426e-bb1f-c6f2b4f45efa",
  1140. "eventType": "AwsApiCall",
  1141. "recipientAccountId": "836073662699"
  1142. },
  1143. {
  1144. "eventVersion": "1.05",
  1145. "userIdentity": {
  1146. "type": "IAMUser",
  1147. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1148. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1149. "accountId": "836073662699",
  1150. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1151. "userName": "DizzyNinja"
  1152. },
  1153. "eventTime": "2017-09-19T23:54:56Z",
  1154. "eventSource": "ec2.amazonaws.com",
  1155. "eventName": "DescribeInstances",
  1156. "awsRegion": "us-east-1",
  1157. "sourceIPAddress": "34.199.66.140",
  1158. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1159. "requestParameters": {
  1160. "instancesSet": {},
  1161. "filterSet": {}
  1162. },
  1163. "responseElements": null,
  1164. "requestID": "4be338dd-431c-4e87-8ab0-af9faa2473bd",
  1165. "eventID": "955ab27b-5367-4e0b-b279-a7af3f148dc3",
  1166. "eventType": "AwsApiCall",
  1167. "recipientAccountId": "836073662699"
  1168. },
  1169. {
  1170. "eventVersion": "1.05",
  1171. "userIdentity": {
  1172. "type": "IAMUser",
  1173. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1174. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1175. "accountId": "836073662699",
  1176. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1177. "userName": "DizzyNinja"
  1178. },
  1179. "eventTime": "2017-09-19T23:54:06Z",
  1180. "eventSource": "ec2.amazonaws.com",
  1181. "eventName": "DescribeInstances",
  1182. "awsRegion": "us-east-1",
  1183. "sourceIPAddress": "52.6.147.236",
  1184. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1185. "requestParameters": {
  1186. "instancesSet": {},
  1187. "filterSet": {}
  1188. },
  1189. "responseElements": null,
  1190. "requestID": "f69a476f-96b6-477d-8c44-6ac095152665",
  1191. "eventID": "816305aa-2654-4efc-9856-06b4c5feb6ad",
  1192. "eventType": "AwsApiCall",
  1193. "recipientAccountId": "836073662699"
  1194. },
  1195. {
  1196. "eventVersion": "1.04",
  1197. "userIdentity": {
  1198. "type": "IAMUser",
  1199. "principalId": "AIDAILUTBF5H2JPTYJPAM",
  1200. "arn": "arn:aws:iam::836073662699:user/jerry.hutchison@rightside.co",
  1201. "accountId": "836073662699",
  1202. "accessKeyId": "ASIAIN2CLER45LBXZ4HA",
  1203. "userName": "jerry.hutchison@rightside.co",
  1204. "sessionContext": {
  1205. "attributes": {
  1206. "mfaAuthenticated": "false",
  1207. "creationDate": "2017-09-19T14:11:46Z"
  1208. }
  1209. },
  1210. "invokedBy": "signin.amazonaws.com"
  1211. },
  1212. "eventTime": "2017-09-19T23:54:22Z",
  1213. "eventSource": "redshift.amazonaws.com",
  1214. "eventName": "DescribeClusters",
  1215. "awsRegion": "us-east-1",
  1216. "sourceIPAddress": "24.18.192.230",
  1217. "userAgent": "signin.amazonaws.com",
  1218. "requestParameters": null,
  1219. "responseElements": {
  1220. "clusters": [
  1221. {
  1222. "nodeType": "dc1.large",
  1223. "preferredMaintenanceWindow": "fri:09:00-fri:09:30",
  1224. "clusterStatus": "available",
  1225. "clusterCreateTime": "May 4, 2015 4:18:03 PM",
  1226. "enhancedVpcRouting": false,
  1227. "endpoint": {
  1228. "port": 5439,
  1229. "address": "rightside-dw-r.cwisduywvaeb.us-east-1.redshift.amazonaws.com"
  1230. },
  1231. "masterUsername": "masteruser",
  1232. "clusterSecurityGroups": [
  1233. {
  1234. "status": "active",
  1235. "clusterSecurityGroupName": "default"
  1236. },
  1237. {
  1238. "status": "active",
  1239. "clusterSecurityGroupName": "access"
  1240. },
  1241. {
  1242. "status": "active",
  1243. "clusterSecurityGroupName": "access1"
  1244. },
  1245. {
  1246. "status": "active",
  1247. "clusterSecurityGroupName": "access2"
  1248. },
  1249. {
  1250. "status": "active",
  1251. "clusterSecurityGroupName": "proxy-vm"
  1252. }
  1253. ],
  1254. "pendingModifiedValues": {},
  1255. "dBName": "rightsidedw",
  1256. "availabilityZone": "us-east-1b",
  1257. "clusterVersion": "1.0",
  1258. "encrypted": false,
  1259. "clusterPublicKey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMg6xK+JtmKZWahr0Gc+cKZKjwa1KakBndc3r/NclrFP/sfFrBI3iHbaT0Jf8nbtyFDjceI3qD++9hcDwZwkiedecIAKic4eIum953ubE3DU32+J5E826C18mSzhypHycgP6y3MeoClMhWkFJZVdffHo8k1uoY6uGyJ695n7gS/zicX7KCloItqIrLKIcz2qwkqnd7FNcDjSBGF/3cA6TX5zngps7uhZx+qTEe2onAjsvUh+QH4pHXhQL4GqTZ6rE2Y/wv0v+VFYbMm+izWsLoSs3kpdw428WCYpdGia2MA+yCJmLdiuTri4IU5Fty6lhZ9NF++4p5YjXxwpET4Rg5 Amazon-Redshift\n",
  1260. "clusterNodes": [
  1261. {
  1262. "publicIPAddress": "184.73.123.149",
  1263. "nodeRole": "LEADER",
  1264. "privateIPAddress": "10.234.108.227"
  1265. },
  1266. {
  1267. "publicIPAddress": "23.22.54.122",
  1268. "nodeRole": "COMPUTE-0",
  1269. "privateIPAddress": "10.165.108.240"
  1270. },
  1271. {
  1272. "publicIPAddress": "54.166.26.205",
  1273. "nodeRole": "COMPUTE-1",
  1274. "privateIPAddress": "10.140.157.70"
  1275. },
  1276. {
  1277. "publicIPAddress": "54.146.178.189",
  1278. "nodeRole": "COMPUTE-2",
  1279. "privateIPAddress": "10.178.204.229"
  1280. },
  1281. {
  1282. "publicIPAddress": "174.129.184.209",
  1283. "nodeRole": "COMPUTE-3",
  1284. "privateIPAddress": "10.142.202.72"
  1285. },
  1286. {
  1287. "publicIPAddress": "54.242.1.196",
  1288. "nodeRole": "COMPUTE-4",
  1289. "privateIPAddress": "10.11.169.99"
  1290. },
  1291. {
  1292. "publicIPAddress": "174.129.65.131",
  1293. "nodeRole": "COMPUTE-5",
  1294. "privateIPAddress": "10.63.62.94"
  1295. },
  1296. {
  1297. "publicIPAddress": "54.205.164.200",
  1298. "nodeRole": "COMPUTE-6",
  1299. "privateIPAddress": "10.37.164.97"
  1300. },
  1301. {
  1302. "publicIPAddress": "54.242.121.142",
  1303. "nodeRole": "COMPUTE-7",
  1304. "privateIPAddress": "10.142.206.165"
  1305. }
  1306. ],
  1307. "publiclyAccessible": true,
  1308. "tags": [
  1309. {
  1310. "value": "edw-prod",
  1311. "key": "Platform"
  1312. },
  1313. {
  1314. "value": "MainRedshift",
  1315. "key": "Name"
  1316. }
  1317. ],
  1318. "clusterParameterGroups": [
  1319. {
  1320. "parameterGroupName": "default.redshift-1.0",
  1321. "parameterApplyStatus": "in-sync"
  1322. }
  1323. ],
  1324. "allowVersionUpgrade": true,
  1325. "clusterRevisionNumber": "1430",
  1326. "automatedSnapshotRetentionPeriod": 1,
  1327. "numberOfNodes": 8,
  1328. "vpcSecurityGroups": [],
  1329. "iamRoles": [],
  1330. "clusterIdentifier": "rightside-dw-r"
  1331. }
  1332. ]
  1333. },
  1334. "requestID": "dbec1701-9d95-11e7-9cda-97adce348902",
  1335. "eventID": "b79dccfb-eaf4-41ad-8824-92bd4c624f37",
  1336. "eventType": "AwsApiCall",
  1337. "recipientAccountId": "836073662699"
  1338. },
  1339. {
  1340. "eventVersion": "1.04",
  1341. "userIdentity": {
  1342. "type": "IAMUser",
  1343. "principalId": "AIDAILUTBF5H2JPTYJPAM",
  1344. "arn": "arn:aws:iam::836073662699:user/jerry.hutchison@rightside.co",
  1345. "accountId": "836073662699",
  1346. "accessKeyId": "ASIAIN2CLER45LBXZ4HA",
  1347. "userName": "jerry.hutchison@rightside.co",
  1348. "sessionContext": {
  1349. "attributes": {
  1350. "mfaAuthenticated": "false",
  1351. "creationDate": "2017-09-19T14:11:46Z"
  1352. }
  1353. },
  1354. "invokedBy": "signin.amazonaws.com"
  1355. },
  1356. "eventTime": "2017-09-19T23:54:20Z",
  1357. "eventSource": "redshift.amazonaws.com",
  1358. "eventName": "DescribeClusterSecurityGroups",
  1359. "awsRegion": "us-east-1",
  1360. "sourceIPAddress": "24.18.192.230",
  1361. "userAgent": "signin.amazonaws.com",
  1362. "requestParameters": null,
  1363. "responseElements": {
  1364. "clusterSecurityGroups": [
  1365. {
  1366. "eC2SecurityGroups": [],
  1367. "iPRanges": [
  1368. {
  1369. "cIDRIP": "76.178.88.240/32",
  1370. "tags": [],
  1371. "status": "authorized"
  1372. },
  1373. {
  1374. "cIDRIP": "54.175.102.28/32",
  1375. "tags": [
  1376. {
  1377. "value": "looking_glass",
  1378. "key": "Name"
  1379. }
  1380. ],
  1381. "status": "authorized"
  1382. },
  1383. {
  1384. "cIDRIP": "70.112.13.35/32",
  1385. "tags": [],
  1386. "status": "authorized"
  1387. },
  1388. {
  1389. "cIDRIP": "72.179.22.90/32",
  1390. "tags": [
  1391. {
  1392. "value": "Scott Ryder Home",
  1393. "key": "Owner"
  1394. }
  1395. ],
  1396. "status": "authorized"
  1397. },
  1398. {
  1399. "cIDRIP": "50.34.162.34/32",
  1400. "tags": [
  1401. {
  1402. "value": "Kevin Fink Home",
  1403. "key": "Owner"
  1404. }
  1405. ],
  1406. "status": "authorized"
  1407. },
  1408. {
  1409. "cIDRIP": "76.178.93.38/32",
  1410. "tags": [],
  1411. "status": "authorized"
  1412. },
  1413. {
  1414. "cIDRIP": "52.0.99.159/32",
  1415. "tags": [
  1416. {
  1417. "value": "looking_glass_stg",
  1418. "key": "Name"
  1419. }
  1420. ],
  1421. "status": "authorized"
  1422. },
  1423. {
  1424. "cIDRIP": "98.203.243.147/32",
  1425. "tags": [
  1426. {
  1427. "value": "Drew MacPherson Home",
  1428. "key": "Owner"
  1429. }
  1430. ],
  1431. "status": "authorized"
  1432. },
  1433. {
  1434. "cIDRIP": "52.0.74.74/32",
  1435. "tags": [],
  1436. "status": "authorized"
  1437. },
  1438. {
  1439. "cIDRIP": "67.79.8.126/32",
  1440. "tags": [],
  1441. "status": "authorized"
  1442. },
  1443. {
  1444. "cIDRIP": "52.5.227.171/32",
  1445. "tags": [
  1446. {
  1447. "value": "DSS Dev1",
  1448. "key": "Owner"
  1449. }
  1450. ],
  1451. "status": "authorized"
  1452. },
  1453. {
  1454. "cIDRIP": "50.170.31.147/32",
  1455. "tags": [
  1456. {
  1457. "value": "Carolyn at home",
  1458. "key": "Name"
  1459. }
  1460. ],
  1461. "status": "authorized"
  1462. },
  1463. {
  1464. "cIDRIP": "173.160.205.246/32",
  1465. "tags": [],
  1466. "status": "authorized"
  1467. },
  1468. {
  1469. "cIDRIP": "54.152.32.20/32",
  1470. "tags": [],
  1471. "status": "authorized"
  1472. },
  1473. {
  1474. "cIDRIP": "149.11.36.178/32",
  1475. "tags": [],
  1476. "status": "authorized"
  1477. },
  1478. {
  1479. "cIDRIP": "99.224.130.177/32",
  1480. "tags": [
  1481. {
  1482. "value": "Kelvin Osborne Home",
  1483. "key": "Owner"
  1484. }
  1485. ],
  1486. "status": "authorized"
  1487. },
  1488. {
  1489. "cIDRIP": "54.152.143.252/32",
  1490. "tags": [],
  1491. "status": "authorized"
  1492. },
  1493. {
  1494. "cIDRIP": "73.157.1.96/32",
  1495. "tags": [
  1496. {
  1497. "value": "Drew MacPherson Home",
  1498. "key": "Owner"
  1499. }
  1500. ],
  1501. "status": "authorized"
  1502. },
  1503. {
  1504. "cIDRIP": "54.152.133.246/32",
  1505. "tags": [],
  1506. "status": "authorized"
  1507. }
  1508. ],
  1509. "description": "Test to see if I can add more access rules",
  1510. "tags": [],
  1511. "clusterSecurityGroupName": "access"
  1512. },
  1513. {
  1514. "eC2SecurityGroups": [],
  1515. "iPRanges": [
  1516. {
  1517. "cIDRIP": "198.134.93.234/32",
  1518. "tags": [
  1519. {
  1520. "value": "Nate Gillespie",
  1521. "key": "Owner"
  1522. }
  1523. ],
  1524. "status": "authorized"
  1525. },
  1526. {
  1527. "cIDRIP": "174.16.221.227/32",
  1528. "tags": [
  1529. {
  1530. "value": "Nate Gillespie",
  1531. "key": "Owner"
  1532. }
  1533. ],
  1534. "status": "authorized"
  1535. },
  1536. {
  1537. "cIDRIP": "69.64.157.89/32",
  1538. "tags": [],
  1539. "status": "authorized"
  1540. },
  1541. {
  1542. "cIDRIP": "69.64.157.12/32",
  1543. "tags": [],
  1544. "status": "authorized"
  1545. },
  1546. {
  1547. "cIDRIP": "69.64.144.72/32",
  1548. "tags": [],
  1549. "status": "authorized"
  1550. },
  1551. {
  1552. "cIDRIP": "69.64.144.130/32",
  1553. "tags": [
  1554. {
  1555. "value": "Kirkland VPN",
  1556. "key": "Name"
  1557. }
  1558. ],
  1559. "status": "authorized"
  1560. },
  1561. {
  1562. "cIDRIP": "52.7.30.104/32",
  1563. "tags": [
  1564. {
  1565. "value": "DSS Dev2",
  1566. "key": "Owner"
  1567. }
  1568. ],
  1569. "status": "authorized"
  1570. },
  1571. {
  1572. "cIDRIP": "69.64.157.67/32",
  1573. "tags": [],
  1574. "status": "authorized"
  1575. },
  1576. {
  1577. "cIDRIP": "69.64.157.66/32",
  1578. "tags": [],
  1579. "status": "authorized"
  1580. }
  1581. ],
  1582. "description": "More addresses",
  1583. "tags": [],
  1584. "clusterSecurityGroupName": "access1"
  1585. },
  1586. {
  1587. "eC2SecurityGroups": [],
  1588. "iPRanges": [
  1589. {
  1590. "cIDRIP": "67.190.26.136/32",
  1591. "tags": [],
  1592. "status": "authorized"
  1593. },
  1594. {
  1595. "cIDRIP": "69.64.159.20/32",
  1596. "tags": [],
  1597. "status": "authorized"
  1598. },
  1599. {
  1600. "cIDRIP": "52.91.76.245/32",
  1601. "tags": [],
  1602. "status": "authorized"
  1603. },
  1604. {
  1605. "cIDRIP": "69.64.144.0/20",
  1606. "tags": [],
  1607. "status": "authorized"
  1608. },
  1609. {
  1610. "cIDRIP": "54.208.19.24/32",
  1611. "tags": [],
  1612. "status": "authorized"
  1613. },
  1614. {
  1615. "cIDRIP": "174.116.159.187/32",
  1616. "tags": [],
  1617. "status": "authorized"
  1618. }
  1619. ],
  1620. "description": "even more ACLs",
  1621. "tags": [],
  1622. "clusterSecurityGroupName": "access2"
  1623. },
  1624. {
  1625. "eC2SecurityGroups": [],
  1626. "iPRanges": [
  1627. {
  1628. "cIDRIP": "72.182.46.26/32",
  1629. "tags": [],
  1630. "status": "authorized"
  1631. }
  1632. ],
  1633. "description": "ACLs",
  1634. "tags": [],
  1635. "clusterSecurityGroupName": "access3"
  1636. },
  1637. {
  1638. "eC2SecurityGroups": [
  1639. {
  1640. "status": "authorized",
  1641. "eC2SecurityGroupOwnerId": "836073662699",
  1642. "eC2SecurityGroupName": "tableauserver",
  1643. "tags": []
  1644. },
  1645. {
  1646. "status": "authorized",
  1647. "eC2SecurityGroupOwnerId": "836073662699",
  1648. "eC2SecurityGroupName": "default",
  1649. "tags": []
  1650. }
  1651. ],
  1652. "iPRanges": [
  1653. {
  1654. "cIDRIP": "24.18.196.110/32",
  1655. "tags": [
  1656. {
  1657. "value": "Jerry Home",
  1658. "key": "Owner"
  1659. }
  1660. ],
  1661. "status": "authorized"
  1662. },
  1663. {
  1664. "cIDRIP": "54.173.9.88/32",
  1665. "tags": [],
  1666. "status": "authorized"
  1667. },
  1668. {
  1669. "cIDRIP": "69.64.155.184/32",
  1670. "tags": [],
  1671. "status": "authorized"
  1672. },
  1673. {
  1674. "cIDRIP": "108.60.56.18/32",
  1675. "tags": [],
  1676. "status": "authorized"
  1677. },
  1678. {
  1679. "cIDRIP": "97.77.90.0/24",
  1680. "tags": [],
  1681. "status": "authorized"
  1682. },
  1683. {
  1684. "cIDRIP": "107.0.83.90/32",
  1685. "tags": [],
  1686. "status": "authorized"
  1687. },
  1688. {
  1689. "cIDRIP": "10.95.168.100/32",
  1690. "tags": [],
  1691. "status": "authorized"
  1692. },
  1693. {
  1694. "cIDRIP": "198.147.209.15/24",
  1695. "tags": [],
  1696. "status": "authorized"
  1697. },
  1698. {
  1699. "cIDRIP": "99.224.71.116/32",
  1700. "tags": [],
  1701. "status": "authorized"
  1702. },
  1703. {
  1704. "cIDRIP": "69.64.144.7/24",
  1705. "tags": [],
  1706. "status": "authorized"
  1707. },
  1708. {
  1709. "cIDRIP": "50.34.223.215/32",
  1710. "tags": [],
  1711. "status": "authorized"
  1712. },
  1713. {
  1714. "cIDRIP": "69.165.217.223/32",
  1715. "tags": [],
  1716. "status": "authorized"
  1717. },
  1718. {
  1719. "cIDRIP": "99.224.76.13/32",
  1720. "tags": [],
  1721. "status": "authorized"
  1722. },
  1723. {
  1724. "cIDRIP": "69.64.153.252/32",
  1725. "tags": [],
  1726. "status": "authorized"
  1727. },
  1728. {
  1729. "cIDRIP": "72.182.50.151/32",
  1730. "tags": [],
  1731. "status": "authorized"
  1732. },
  1733. {
  1734. "cIDRIP": "99.224.43.75/32",
  1735. "tags": [],
  1736. "status": "authorized"
  1737. },
  1738. {
  1739. "cIDRIP": "198.134.89.186/32",
  1740. "tags": [],
  1741. "status": "authorized"
  1742. }
  1743. ],
  1744. "description": "default",
  1745. "tags": [
  1746. {
  1747. "value": "DefaultRedshft",
  1748. "key": "Name"
  1749. }
  1750. ],
  1751. "clusterSecurityGroupName": "default"
  1752. },
  1753. {
  1754. "eC2SecurityGroups": [],
  1755. "iPRanges": [
  1756. {
  1757. "cIDRIP": "34.204.236.103/32",
  1758. "tags": [],
  1759. "status": "authorized"
  1760. }
  1761. ],
  1762. "description": "Access from proxy VM for VPN access",
  1763. "tags": [],
  1764. "clusterSecurityGroupName": "proxy-vm"
  1765. }
  1766. ]
  1767. },
  1768. "requestID": "da172fc9-9d95-11e7-9cda-97adce348902",
  1769. "eventID": "165fad5a-d9f5-4226-9a15-cd43f7b0e43d",
  1770. "eventType": "AwsApiCall",
  1771. "recipientAccountId": "836073662699"
  1772. },
  1773. {
  1774. "eventVersion": "1.05",
  1775. "userIdentity": {
  1776. "type": "IAMUser",
  1777. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1778. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1779. "accountId": "836073662699",
  1780. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1781. "userName": "DizzyNinja"
  1782. },
  1783. "eventTime": "2017-09-19T23:54:08Z",
  1784. "eventSource": "ec2.amazonaws.com",
  1785. "eventName": "DescribeInstances",
  1786. "awsRegion": "us-east-1",
  1787. "sourceIPAddress": "54.173.51.226",
  1788. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1789. "requestParameters": {
  1790. "instancesSet": {},
  1791. "filterSet": {}
  1792. },
  1793. "responseElements": null,
  1794. "requestID": "fd76d9c0-6472-4c8e-8f0c-df5fc1e999e2",
  1795. "eventID": "28c66b6a-7420-4ae6-995b-42568744233c",
  1796. "eventType": "AwsApiCall",
  1797. "recipientAccountId": "836073662699"
  1798. },
  1799. {
  1800. "eventVersion": "1.05",
  1801. "userIdentity": {
  1802. "type": "IAMUser",
  1803. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1804. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1805. "accountId": "836073662699",
  1806. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1807. "userName": "DizzyNinja"
  1808. },
  1809. "eventTime": "2017-09-19T23:53:57Z",
  1810. "eventSource": "ec2.amazonaws.com",
  1811. "eventName": "DescribeInstances",
  1812. "awsRegion": "us-east-1",
  1813. "sourceIPAddress": "54.147.86.214",
  1814. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1815. "requestParameters": {
  1816. "instancesSet": {},
  1817. "filterSet": {}
  1818. },
  1819. "responseElements": null,
  1820. "requestID": "a99f2d8f-9a4d-432c-9ce2-92b1e787910a",
  1821. "eventID": "fd233c51-c2aa-45a0-a51c-1d2136f60137",
  1822. "eventType": "AwsApiCall",
  1823. "recipientAccountId": "836073662699"
  1824. },
  1825. {
  1826. "eventVersion": "1.05",
  1827. "userIdentity": {
  1828. "type": "AWSService",
  1829. "invokedBy": "config.amazonaws.com"
  1830. },
  1831. "eventTime": "2017-09-19T23:54:21Z",
  1832. "eventSource": "sts.amazonaws.com",
  1833. "eventName": "AssumeRole",
  1834. "awsRegion": "us-east-1",
  1835. "sourceIPAddress": "config.amazonaws.com",
  1836. "userAgent": "config.amazonaws.com",
  1837. "requestParameters": {
  1838. "roleArn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
  1839. "roleSessionName": "AutoScalingDescribeHandlerSession"
  1840. },
  1841. "responseElements": {
  1842. "credentials": {
  1843. "accessKeyId": "ASIAJFCICIJZDAF6PXTA",
  1844. "expiration": "Sep 20, 2017 12:54:21 AM",
  1845. "sessionToken": "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\\u003d"
  1846. },
  1847. "assumedRoleUser": {
  1848. "assumedRoleId": "AROAIY55HROFL5CKSWD4Y:AutoScalingDescribeHandlerSession",
  1849. "arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AutoScalingDescribeHandlerSession"
  1850. }
  1851. },
  1852. "requestID": "db3745bb-9d95-11e7-b056-99c62b38392f",
  1853. "eventID": "d95c4b17-b274-44a6-8f5a-b777fdd30f25",
  1854. "resources": [
  1855. {
  1856. "ARN": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
  1857. "accountId": "836073662699",
  1858. "type": "AWS::IAM::Role"
  1859. }
  1860. ],
  1861. "eventType": "AwsApiCall",
  1862. "recipientAccountId": "836073662699",
  1863. "sharedEventID": "8ccb857f-02fa-4c21-9528-f3282d4d202e"
  1864. },
  1865. {
  1866. "eventVersion": "1.05",
  1867. "userIdentity": {
  1868. "type": "AWSService",
  1869. "invokedBy": "config.amazonaws.com"
  1870. },
  1871. "eventTime": "2017-09-19T23:54:21Z",
  1872. "eventSource": "sts.amazonaws.com",
  1873. "eventName": "AssumeRole",
  1874. "awsRegion": "us-east-1",
  1875. "sourceIPAddress": "config.amazonaws.com",
  1876. "userAgent": "config.amazonaws.com",
  1877. "requestParameters": {
  1878. "roleArn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
  1879. "roleSessionName": "AWSConfig-Describe"
  1880. },
  1881. "responseElements": {
  1882. "credentials": {
  1883. "accessKeyId": "ASIAIOV6JLC3RJ4SN4AA",
  1884. "expiration": "Sep 20, 2017 12:54:21 AM",
  1885. "sessionToken": "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\\u003d"
  1886. },
  1887. "assumedRoleUser": {
  1888. "assumedRoleId": "AROAIY55HROFL5CKSWD4Y:AWSConfig-Describe",
  1889. "arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AWSConfig-Describe"
  1890. }
  1891. },
  1892. "requestID": "db4f88ad-9d95-11e7-8027-7dfe4b0af8f1",
  1893. "eventID": "0ed3822e-b3ae-455b-bce4-45a34df0e290",
  1894. "resources": [
  1895. {
  1896. "ARN": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
  1897. "accountId": "836073662699",
  1898. "type": "AWS::IAM::Role"
  1899. }
  1900. ],
  1901. "eventType": "AwsApiCall",
  1902. "recipientAccountId": "836073662699",
  1903. "sharedEventID": "aa7e0212-7cc2-474c-8831-62859a669007"
  1904. },
  1905. {
  1906. "eventVersion": "1.05",
  1907. "userIdentity": {
  1908. "type": "IAMUser",
  1909. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1910. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1911. "accountId": "836073662699",
  1912. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1913. "userName": "DizzyNinja"
  1914. },
  1915. "eventTime": "2017-09-19T23:54:36Z",
  1916. "eventSource": "ec2.amazonaws.com",
  1917. "eventName": "DescribeInstances",
  1918. "awsRegion": "us-east-1",
  1919. "sourceIPAddress": "54.234.33.248",
  1920. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1921. "requestParameters": {
  1922. "instancesSet": {},
  1923. "filterSet": {}
  1924. },
  1925. "responseElements": null,
  1926. "requestID": "78439faf-72c9-48d1-830e-6c4e6fa26eb9",
  1927. "eventID": "417250db-8e75-4967-a049-a7fb07205477",
  1928. "eventType": "AwsApiCall",
  1929. "recipientAccountId": "836073662699"
  1930. },
  1931. {
  1932. "eventVersion": "1.05",
  1933. "userIdentity": {
  1934. "type": "IAMUser",
  1935. "principalId": "AIDAJE4OISGTZNKQGSORC",
  1936. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  1937. "accountId": "836073662699",
  1938. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  1939. "userName": "DizzyNinja"
  1940. },
  1941. "eventTime": "2017-09-19T23:53:00Z",
  1942. "eventSource": "ec2.amazonaws.com",
  1943. "eventName": "DescribeInstances",
  1944. "awsRegion": "us-east-1",
  1945. "sourceIPAddress": "107.22.20.81",
  1946. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  1947. "requestParameters": {
  1948. "instancesSet": {},
  1949. "filterSet": {}
  1950. },
  1951. "responseElements": null,
  1952. "requestID": "277ad169-1adb-4863-b2cf-447a14e98759",
  1953. "eventID": "4785c8e2-8d85-405d-9704-eed2511c27fc",
  1954. "eventType": "AwsApiCall",
  1955. "recipientAccountId": "836073662699"
  1956. },
  1957. {
  1958. "eventVersion": "1.04",
  1959. "userIdentity": {
  1960. "type": "IAMUser",
  1961. "principalId": "AIDAILUTBF5H2JPTYJPAM",
  1962. "arn": "arn:aws:iam::836073662699:user/jerry.hutchison@rightside.co",
  1963. "accountId": "836073662699",
  1964. "accessKeyId": "ASIAIN2CLER45LBXZ4HA",
  1965. "userName": "jerry.hutchison@rightside.co",
  1966. "sessionContext": {
  1967. "attributes": {
  1968. "mfaAuthenticated": "false",
  1969. "creationDate": "2017-09-19T14:11:46Z"
  1970. }
  1971. },
  1972. "invokedBy": "signin.amazonaws.com"
  1973. },
  1974. "eventTime": "2017-09-19T23:55:22Z",
  1975. "eventSource": "redshift.amazonaws.com",
  1976. "eventName": "DescribeClusters",
  1977. "awsRegion": "us-east-1",
  1978. "sourceIPAddress": "24.18.192.230",
  1979. "userAgent": "signin.amazonaws.com",
  1980. "requestParameters": null,
  1981. "responseElements": {
  1982. "clusters": [
  1983. {
  1984. "nodeType": "dc1.large",
  1985. "preferredMaintenanceWindow": "fri:09:00-fri:09:30",
  1986. "clusterStatus": "available",
  1987. "clusterCreateTime": "May 4, 2015 4:18:03 PM",
  1988. "enhancedVpcRouting": false,
  1989. "endpoint": {
  1990. "port": 5439,
  1991. "address": "rightside-dw-r.cwisduywvaeb.us-east-1.redshift.amazonaws.com"
  1992. },
  1993. "masterUsername": "masteruser",
  1994. "clusterSecurityGroups": [
  1995. {
  1996. "status": "active",
  1997. "clusterSecurityGroupName": "default"
  1998. },
  1999. {
  2000. "status": "active",
  2001. "clusterSecurityGroupName": "access"
  2002. },
  2003. {
  2004. "status": "active",
  2005. "clusterSecurityGroupName": "access1"
  2006. },
  2007. {
  2008. "status": "active",
  2009. "clusterSecurityGroupName": "access2"
  2010. },
  2011. {
  2012. "status": "active",
  2013. "clusterSecurityGroupName": "proxy-vm"
  2014. }
  2015. ],
  2016. "pendingModifiedValues": {},
  2017. "dBName": "rightsidedw",
  2018. "availabilityZone": "us-east-1b",
  2019. "clusterVersion": "1.0",
  2020. "encrypted": false,
  2021. "clusterPublicKey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMg6xK+JtmKZWahr0Gc+cKZKjwa1KakBndc3r/NclrFP/sfFrBI3iHbaT0Jf8nbtyFDjceI3qD++9hcDwZwkiedecIAKic4eIum953ubE3DU32+J5E826C18mSzhypHycgP6y3MeoClMhWkFJZVdffHo8k1uoY6uGyJ695n7gS/zicX7KCloItqIrLKIcz2qwkqnd7FNcDjSBGF/3cA6TX5zngps7uhZx+qTEe2onAjsvUh+QH4pHXhQL4GqTZ6rE2Y/wv0v+VFYbMm+izWsLoSs3kpdw428WCYpdGia2MA+yCJmLdiuTri4IU5Fty6lhZ9NF++4p5YjXxwpET4Rg5 Amazon-Redshift\n",
  2022. "clusterNodes": [
  2023. {
  2024. "publicIPAddress": "184.73.123.149",
  2025. "nodeRole": "LEADER",
  2026. "privateIPAddress": "10.234.108.227"
  2027. },
  2028. {
  2029. "publicIPAddress": "23.22.54.122",
  2030. "nodeRole": "COMPUTE-0",
  2031. "privateIPAddress": "10.165.108.240"
  2032. },
  2033. {
  2034. "publicIPAddress": "54.166.26.205",
  2035. "nodeRole": "COMPUTE-1",
  2036. "privateIPAddress": "10.140.157.70"
  2037. },
  2038. {
  2039. "publicIPAddress": "54.146.178.189",
  2040. "nodeRole": "COMPUTE-2",
  2041. "privateIPAddress": "10.178.204.229"
  2042. },
  2043. {
  2044. "publicIPAddress": "174.129.184.209",
  2045. "nodeRole": "COMPUTE-3",
  2046. "privateIPAddress": "10.142.202.72"
  2047. },
  2048. {
  2049. "publicIPAddress": "54.242.1.196",
  2050. "nodeRole": "COMPUTE-4",
  2051. "privateIPAddress": "10.11.169.99"
  2052. },
  2053. {
  2054. "publicIPAddress": "174.129.65.131",
  2055. "nodeRole": "COMPUTE-5",
  2056. "privateIPAddress": "10.63.62.94"
  2057. },
  2058. {
  2059. "publicIPAddress": "54.205.164.200",
  2060. "nodeRole": "COMPUTE-6",
  2061. "privateIPAddress": "10.37.164.97"
  2062. },
  2063. {
  2064. "publicIPAddress": "54.242.121.142",
  2065. "nodeRole": "COMPUTE-7",
  2066. "privateIPAddress": "10.142.206.165"
  2067. }
  2068. ],
  2069. "publiclyAccessible": true,
  2070. "tags": [
  2071. {
  2072. "value": "edw-prod",
  2073. "key": "Platform"
  2074. },
  2075. {
  2076. "value": "MainRedshift",
  2077. "key": "Name"
  2078. }
  2079. ],
  2080. "clusterParameterGroups": [
  2081. {
  2082. "parameterGroupName": "default.redshift-1.0",
  2083. "parameterApplyStatus": "in-sync"
  2084. }
  2085. ],
  2086. "allowVersionUpgrade": true,
  2087. "clusterRevisionNumber": "1430",
  2088. "automatedSnapshotRetentionPeriod": 1,
  2089. "numberOfNodes": 8,
  2090. "vpcSecurityGroups": [],
  2091. "iamRoles": [],
  2092. "clusterIdentifier": "rightside-dw-r"
  2093. }
  2094. ]
  2095. },
  2096. "requestID": "ffb3069c-9d95-11e7-90a6-e19a19b7b2d5",
  2097. "eventID": "27645bba-f22f-4936-b72b-1a75ec2d756d",
  2098. "eventType": "AwsApiCall",
  2099. "recipientAccountId": "836073662699"
  2100. },
  2101. {
  2102. "eventVersion": "1.05",
  2103. "userIdentity": {
  2104. "type": "IAMUser",
  2105. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2106. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2107. "accountId": "836073662699",
  2108. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2109. "userName": "DizzyNinja"
  2110. },
  2111. "eventTime": "2017-09-19T23:55:41Z",
  2112. "eventSource": "ec2.amazonaws.com",
  2113. "eventName": "DescribeInstances",
  2114. "awsRegion": "us-east-1",
  2115. "sourceIPAddress": "54.234.33.248",
  2116. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2117. "requestParameters": {
  2118. "instancesSet": {},
  2119. "filterSet": {}
  2120. },
  2121. "responseElements": null,
  2122. "requestID": "ca0e28f0-3aa8-40f8-bb82-7aaf98b57da0",
  2123. "eventID": "0dc23817-d54c-4e6a-a915-1b9b3e7a9ab2",
  2124. "eventType": "AwsApiCall",
  2125. "recipientAccountId": "836073662699"
  2126. },
  2127. {
  2128. "eventVersion": "1.05",
  2129. "userIdentity": {
  2130. "type": "IAMUser",
  2131. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2132. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2133. "accountId": "836073662699",
  2134. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2135. "userName": "DizzyNinja"
  2136. },
  2137. "eventTime": "2017-09-19T23:53:23Z",
  2138. "eventSource": "ec2.amazonaws.com",
  2139. "eventName": "DescribeInstances",
  2140. "awsRegion": "us-east-1",
  2141. "sourceIPAddress": "54.165.160.164",
  2142. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2143. "requestParameters": {
  2144. "instancesSet": {},
  2145. "filterSet": {}
  2146. },
  2147. "responseElements": null,
  2148. "requestID": "a0a9389c-9d91-472e-92fb-b51092908f22",
  2149. "eventID": "aa2c11f7-46ff-4905-a200-87a00f597033",
  2150. "eventType": "AwsApiCall",
  2151. "recipientAccountId": "836073662699"
  2152. },
  2153. {
  2154. "eventVersion": "1.05",
  2155. "userIdentity": {
  2156. "type": "IAMUser",
  2157. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2158. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2159. "accountId": "836073662699",
  2160. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2161. "userName": "DizzyNinja"
  2162. },
  2163. "eventTime": "2017-09-19T23:55:01Z",
  2164. "eventSource": "ec2.amazonaws.com",
  2165. "eventName": "DescribeInstances",
  2166. "awsRegion": "us-east-1",
  2167. "sourceIPAddress": "54.147.184.112",
  2168. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2169. "requestParameters": {
  2170. "instancesSet": {},
  2171. "filterSet": {}
  2172. },
  2173. "responseElements": null,
  2174. "requestID": "e4e51502-44b7-4734-97f9-db368fa56c3c",
  2175. "eventID": "1bfb9e31-61bf-47c8-ab2d-512879543c00",
  2176. "eventType": "AwsApiCall",
  2177. "recipientAccountId": "836073662699"
  2178. },
  2179. {
  2180. "eventVersion": "1.05",
  2181. "userIdentity": {
  2182. "type": "IAMUser",
  2183. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2184. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2185. "accountId": "836073662699",
  2186. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2187. "userName": "DizzyNinja"
  2188. },
  2189. "eventTime": "2017-09-19T23:54:34Z",
  2190. "eventSource": "ec2.amazonaws.com",
  2191. "eventName": "DescribeInstances",
  2192. "awsRegion": "us-east-1",
  2193. "sourceIPAddress": "54.225.59.80",
  2194. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2195. "requestParameters": {
  2196. "instancesSet": {},
  2197. "filterSet": {}
  2198. },
  2199. "responseElements": null,
  2200. "requestID": "553c1a06-9f42-42b6-9e32-54f561fae9fb",
  2201. "eventID": "571412fa-9cbd-4f75-a463-d0588f2db5f3",
  2202. "eventType": "AwsApiCall",
  2203. "recipientAccountId": "836073662699"
  2204. },
  2205. {
  2206. "eventVersion": "1.05",
  2207. "userIdentity": {
  2208. "type": "IAMUser",
  2209. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2210. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2211. "accountId": "836073662699",
  2212. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2213. "userName": "DizzyNinja"
  2214. },
  2215. "eventTime": "2017-09-19T23:54:43Z",
  2216. "eventSource": "ec2.amazonaws.com",
  2217. "eventName": "DescribeInstances",
  2218. "awsRegion": "us-east-1",
  2219. "sourceIPAddress": "54.172.37.251",
  2220. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2221. "requestParameters": {
  2222. "instancesSet": {},
  2223. "filterSet": {}
  2224. },
  2225. "responseElements": null,
  2226. "requestID": "6d67af3e-57ab-4c4e-afcf-1f32949ae630",
  2227. "eventID": "e5897496-175d-4436-9df3-a7325ca88ede",
  2228. "eventType": "AwsApiCall",
  2229. "recipientAccountId": "836073662699"
  2230. },
  2231. {
  2232. "eventVersion": "1.04",
  2233. "userIdentity": {
  2234. "type": "AssumedRole",
  2235. "principalId": "AROAIY55HROFL5CKSWD4Y:AWSConfig-Describe",
  2236. "arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AWSConfig-Describe",
  2237. "accountId": "836073662699",
  2238. "accessKeyId": "ASIAJ6KZYR3QXGUYOXMA",
  2239. "sessionContext": {
  2240. "attributes": {
  2241. "mfaAuthenticated": "false",
  2242. "creationDate": "2017-09-19T23:54:21Z"
  2243. },
  2244. "sessionIssuer": {
  2245. "type": "Role",
  2246. "principalId": "AROAIY55HROFL5CKSWD4Y",
  2247. "arn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
  2248. "accountId": "836073662699",
  2249. "userName": "config-role-us-east-1"
  2250. }
  2251. },
  2252. "invokedBy": "config.amazonaws.com"
  2253. },
  2254. "eventTime": "2017-09-19T23:54:21Z",
  2255. "eventSource": "acm.amazonaws.com",
  2256. "eventName": "ListCertificates",
  2257. "awsRegion": "us-east-1",
  2258. "sourceIPAddress": "config.amazonaws.com",
  2259. "userAgent": "config.amazonaws.com",
  2260. "requestParameters": null,
  2261. "responseElements": null,
  2262. "requestID": "db57ecfa-9d95-11e7-a6a0-8b5ff0b3ee1f",
  2263. "eventID": "ceb79ad2-3dd9-4b0e-964c-44b77ae78fa5",
  2264. "eventType": "AwsApiCall",
  2265. "recipientAccountId": "836073662699"
  2266. },
  2267. {
  2268. "eventVersion": "1.05",
  2269. "userIdentity": {
  2270. "type": "IAMUser",
  2271. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  2272. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  2273. "accountId": "836073662699",
  2274. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  2275. "userName": "svc-lookglass-prd"
  2276. },
  2277. "eventTime": "2017-09-19T23:53:08Z",
  2278. "eventSource": "ec2.amazonaws.com",
  2279. "eventName": "DescribeSpotInstanceRequests",
  2280. "awsRegion": "us-east-1",
  2281. "sourceIPAddress": "34.204.248.185",
  2282. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  2283. "requestParameters": {
  2284. "spotInstanceRequestIdSet": {},
  2285. "filterSet": {}
  2286. },
  2287. "responseElements": null,
  2288. "requestID": "a5444806-dc9f-4717-a9fd-d583df667523",
  2289. "eventID": "e570606b-2775-493a-9212-325be1b037e7",
  2290. "eventType": "AwsApiCall",
  2291. "recipientAccountId": "836073662699"
  2292. },
  2293. {
  2294. "eventVersion": "1.05",
  2295. "userIdentity": {
  2296. "type": "IAMUser",
  2297. "principalId": "AIDAI5HSV5Q3AL3LD7SNA",
  2298. "arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
  2299. "accountId": "836073662699",
  2300. "accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
  2301. "userName": "svc-lookglass-prd"
  2302. },
  2303. "eventTime": "2017-09-19T23:53:07Z",
  2304. "eventSource": "ec2.amazonaws.com",
  2305. "eventName": "DescribeInstances",
  2306. "awsRegion": "us-east-1",
  2307. "sourceIPAddress": "34.204.248.185",
  2308. "userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
  2309. "requestParameters": {
  2310. "instancesSet": {},
  2311. "filterSet": {}
  2312. },
  2313. "responseElements": null,
  2314. "requestID": "286a9e5a-26c8-4146-8b26-38d72d573fc5",
  2315. "eventID": "ed9565a1-f5ae-4b15-91f9-af86c40dc8bf",
  2316. "eventType": "AwsApiCall",
  2317. "recipientAccountId": "836073662699"
  2318. },
  2319. {
  2320. "eventVersion": "1.05",
  2321. "userIdentity": {
  2322. "type": "IAMUser",
  2323. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2324. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2325. "accountId": "836073662699",
  2326. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2327. "userName": "DizzyNinja"
  2328. },
  2329. "eventTime": "2017-09-19T23:55:06Z",
  2330. "eventSource": "ec2.amazonaws.com",
  2331. "eventName": "DescribeInstances",
  2332. "awsRegion": "us-east-1",
  2333. "sourceIPAddress": "52.6.147.236",
  2334. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2335. "requestParameters": {
  2336. "instancesSet": {},
  2337. "filterSet": {}
  2338. },
  2339. "responseElements": null,
  2340. "requestID": "71ddc35b-113b-4edd-87d0-d81aae02b8ca",
  2341. "eventID": "a7917034-3300-441e-95bb-8803309582b9",
  2342. "eventType": "AwsApiCall",
  2343. "recipientAccountId": "836073662699"
  2344. },
  2345. {
  2346. "eventVersion": "1.05",
  2347. "userIdentity": {
  2348. "type": "IAMUser",
  2349. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2350. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2351. "accountId": "836073662699",
  2352. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2353. "userName": "DizzyNinja"
  2354. },
  2355. "eventTime": "2017-09-19T23:54:23Z",
  2356. "eventSource": "ec2.amazonaws.com",
  2357. "eventName": "DescribeInstances",
  2358. "awsRegion": "us-east-1",
  2359. "sourceIPAddress": "54.165.160.164",
  2360. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2361. "requestParameters": {
  2362. "instancesSet": {},
  2363. "filterSet": {}
  2364. },
  2365. "responseElements": null,
  2366. "requestID": "dbe24e0b-9568-407d-a5ac-0887e91c85fd",
  2367. "eventID": "e724ffb3-e491-4b69-9102-25ab0dbdda58",
  2368. "eventType": "AwsApiCall",
  2369. "recipientAccountId": "836073662699"
  2370. },
  2371. {
  2372. "eventVersion": "1.05",
  2373. "userIdentity": {
  2374. "type": "IAMUser",
  2375. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2376. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2377. "accountId": "836073662699",
  2378. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2379. "userName": "DizzyNinja"
  2380. },
  2381. "eventTime": "2017-09-19T23:53:59Z",
  2382. "eventSource": "ec2.amazonaws.com",
  2383. "eventName": "DescribeInstances",
  2384. "awsRegion": "us-east-1",
  2385. "sourceIPAddress": "34.197.60.114",
  2386. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2387. "requestParameters": {
  2388. "instancesSet": {},
  2389. "filterSet": {}
  2390. },
  2391. "responseElements": null,
  2392. "requestID": "d987dbec-ca28-4870-8cac-504eec2f338c",
  2393. "eventID": "aa20ac12-885d-4464-ac23-819cc4eaa7dd",
  2394. "eventType": "AwsApiCall",
  2395. "recipientAccountId": "836073662699"
  2396. },
  2397. {
  2398. "eventVersion": "1.05",
  2399. "userIdentity": {
  2400. "type": "IAMUser",
  2401. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2402. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2403. "accountId": "836073662699",
  2404. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2405. "userName": "DizzyNinja"
  2406. },
  2407. "eventTime": "2017-09-19T23:53:03Z",
  2408. "eventSource": "ec2.amazonaws.com",
  2409. "eventName": "DescribeInstances",
  2410. "awsRegion": "us-east-1",
  2411. "sourceIPAddress": "54.225.53.250",
  2412. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2413. "requestParameters": {
  2414. "instancesSet": {},
  2415. "filterSet": {}
  2416. },
  2417. "responseElements": null,
  2418. "requestID": "b5d1268a-80eb-4952-aa6b-1b77b34addbd",
  2419. "eventID": "f4535b47-5ceb-4b31-9d88-399b3a079e7e",
  2420. "eventType": "AwsApiCall",
  2421. "recipientAccountId": "836073662699"
  2422. },
  2423. {
  2424. "eventVersion": "1.05",
  2425. "userIdentity": {
  2426. "type": "IAMUser",
  2427. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2428. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2429. "accountId": "836073662699",
  2430. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2431. "userName": "DizzyNinja"
  2432. },
  2433. "eventTime": "2017-09-19T23:53:43Z",
  2434. "eventSource": "ec2.amazonaws.com",
  2435. "eventName": "DescribeInstances",
  2436. "awsRegion": "us-east-1",
  2437. "sourceIPAddress": "54.172.37.251",
  2438. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2439. "requestParameters": {
  2440. "instancesSet": {},
  2441. "filterSet": {}
  2442. },
  2443. "responseElements": null,
  2444. "requestID": "7528812a-e64e-42ff-8623-ae35c145deff",
  2445. "eventID": "3ac8db8f-da40-4593-996c-59c36ed74503",
  2446. "eventType": "AwsApiCall",
  2447. "recipientAccountId": "836073662699"
  2448. },
  2449. {
  2450. "eventVersion": "1.05",
  2451. "userIdentity": {
  2452. "type": "IAMUser",
  2453. "principalId": "AIDAJE4OISGTZNKQGSORC",
  2454. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  2455. "accountId": "836073662699",
  2456. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  2457. "userName": "DizzyNinja"
  2458. },
  2459. "eventTime": "2017-09-19T23:53:56Z",
  2460. "eventSource": "ec2.amazonaws.com",
  2461. "eventName": "DescribeInstances",
  2462. "awsRegion": "us-east-1",
  2463. "sourceIPAddress": "34.199.66.140",
  2464. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  2465. "requestParameters": {
  2466. "instancesSet": {},
  2467. "filterSet": {}
  2468. },
  2469. "responseElements": null,
  2470. "requestID": "f2aa06b5-9828-4bdc-8912-631929630325",
  2471. "eventID": "37e5bf58-0470-4e8c-af91-3e0870207694",
  2472. "eventType": "AwsApiCall",
  2473. "recipientAccountId": "836073662699"
  2474. },
  2475. {
  2476. "eventVersion": "1.04",
  2477. "userIdentity": {
  2478. "type": "IAMUser",
  2479. "principalId": "AIDAILUTBF5H2JPTYJPAM",
  2480. "arn": "arn:aws:iam::836073662699:user/jerry.hutchison@rightside.co",
  2481. "accountId": "836073662699",
  2482. "accessKeyId": "ASIAIN2CLER45LBXZ4HA",
  2483. "userName": "jerry.hutchison@rightside.co",
  2484. "sessionContext": {
  2485. "attributes": {
  2486. "mfaAuthenticated": "false",
  2487. "creationDate": "2017-09-19T14:11:46Z"
  2488. }
  2489. },
  2490. "invokedBy": "signin.amazonaws.com"
  2491. },
  2492. "eventTime": "2017-09-19T23:53:19Z",
  2493. "eventSource": "redshift.amazonaws.com",
  2494. "eventName": "DescribeClusterSecurityGroups",
  2495. "awsRegion": "us-east-1",
  2496. "sourceIPAddress": "24.18.192.230",
  2497. "userAgent": "signin.amazonaws.com",
  2498. "requestParameters": null,
  2499. "responseElements": {
  2500. "clusterSecurityGroups": [
  2501. {
  2502. "eC2SecurityGroups": [],
  2503. "iPRanges": [
  2504. {
  2505. "cIDRIP": "76.178.88.240/32",
  2506. "tags": [],
  2507. "status": "authorized"
  2508. },
  2509. {
  2510. "cIDRIP": "54.175.102.28/32",
  2511. "tags": [
  2512. {
  2513. "value": "looking_glass",
  2514. "key": "Name"
  2515. }
  2516. ],
  2517. "status": "authorized"
  2518. },
  2519. {
  2520. "cIDRIP": "70.112.13.35/32",
  2521. "tags": [],
  2522. "status": "authorized"
  2523. },
  2524. {
  2525. "cIDRIP": "72.179.22.90/32",
  2526. "tags": [
  2527. {
  2528. "value": "Scott Ryder Home",
  2529. "key": "Owner"
  2530. }
  2531. ],
  2532. "status": "authorized"
  2533. },
  2534. {
  2535. "cIDRIP": "50.34.162.34/32",
  2536. "tags": [
  2537. {
  2538. "value": "Kevin Fink Home",
  2539. "key": "Owner"
  2540. }
  2541. ],
  2542. "status": "authorized"
  2543. },
  2544. {
  2545. "cIDRIP": "76.178.93.38/32",
  2546. "tags": [],
  2547. "status": "authorized"
  2548. },
  2549. {
  2550. "cIDRIP": "52.0.99.159/32",
  2551. "tags": [
  2552. {
  2553. "value": "looking_glass_stg",
  2554. "key": "Name"
  2555. }
  2556. ],
  2557. "status": "authorized"
  2558. },
  2559. {
  2560. "cIDRIP": "98.203.243.147/32",
  2561. "tags": [
  2562. {
  2563. "value": "Drew MacPherson Home",
  2564. "key": "Owner"
  2565. }
  2566. ],
  2567. "status": "authorized"
  2568. },
  2569. {
  2570. "cIDRIP": "52.0.74.74/32",
  2571. "tags": [],
  2572. "status": "authorized"
  2573. },
  2574. {
  2575. "cIDRIP": "67.79.8.126/32",
  2576. "tags": [],
  2577. "status": "authorized"
  2578. },
  2579. {
  2580. "cIDRIP": "52.5.227.171/32",
  2581. "tags": [
  2582. {
  2583. "value": "DSS Dev1",
  2584. "key": "Owner"
  2585. }
  2586. ],
  2587. "status": "authorized"
  2588. },
  2589. {
  2590. "cIDRIP": "50.170.31.147/32",
  2591. "tags": [
  2592. {
  2593. "value": "Carolyn at home",
  2594. "key": "Name"
  2595. }
  2596. ],
  2597. "status": "authorized"
  2598. },
  2599. {
  2600. "cIDRIP": "173.160.205.246/32",
  2601. "tags": [],
  2602. "status": "authorized"
  2603. },
  2604. {
  2605. "cIDRIP": "54.152.32.20/32",
  2606. "tags": [],
  2607. "status": "authorized"
  2608. },
  2609. {
  2610. "cIDRIP": "149.11.36.178/32",
  2611. "tags": [],
  2612. "status": "authorized"
  2613. },
  2614. {
  2615. "cIDRIP": "99.224.130.177/32",
  2616. "tags": [
  2617. {
  2618. "value": "Kelvin Osborne Home",
  2619. "key": "Owner"
  2620. }
  2621. ],
  2622. "status": "authorized"
  2623. },
  2624. {
  2625. "cIDRIP": "54.152.143.252/32",
  2626. "tags": [],
  2627. "status": "authorized"
  2628. },
  2629. {
  2630. "cIDRIP": "73.157.1.96/32",
  2631. "tags": [
  2632. {
  2633. "value": "Drew MacPherson Home",
  2634. "key": "Owner"
  2635. }
  2636. ],
  2637. "status": "authorized"
  2638. },
  2639. {
  2640. "cIDRIP": "54.152.133.246/32",
  2641. "tags": [],
  2642. "status": "authorized"
  2643. }
  2644. ],
  2645. "description": "Test to see if I can add more access rules",
  2646. "tags": [],
  2647. "clusterSecurityGroupName": "access"
  2648. },
  2649. {
  2650. "eC2SecurityGroups": [],
  2651. "iPRanges": [
  2652. {
  2653. "cIDRIP": "198.134.93.234/32",
  2654. "tags": [
  2655. {
  2656. "value": "Nate Gillespie",
  2657. "key": "Owner"
  2658. }
  2659. ],
  2660. "status": "authorized"
  2661. },
  2662. {
  2663. "cIDRIP": "174.16.221.227/32",
  2664. "tags": [
  2665. {
  2666. "value": "Nate Gillespie",
  2667. "key": "Owner"
  2668. }
  2669. ],
  2670. "status": "authorized"
  2671. },
  2672. {
  2673. "cIDRIP": "69.64.157.89/32",
  2674. "tags": [],
  2675. "status": "authorized"
  2676. },
  2677. {
  2678. "cIDRIP": "69.64.157.12/32",
  2679. "tags": [],
  2680. "status": "authorized"
  2681. },
  2682. {
  2683. "cIDRIP": "69.64.144.72/32",
  2684. "tags": [],
  2685. "status": "authorized"
  2686. },
  2687. {
  2688. "cIDRIP": "69.64.144.130/32",
  2689. "tags": [
  2690. {
  2691. "value": "Kirkland VPN",
  2692. "key": "Name"
  2693. }
  2694. ],
  2695. "status": "authorized"
  2696. },
  2697. {
  2698. "cIDRIP": "52.7.30.104/32",
  2699. "tags": [
  2700. {
  2701. "value": "DSS Dev2",
  2702. "key": "Owner"
  2703. }
  2704. ],
  2705. "status": "authorized"
  2706. },
  2707. {
  2708. "cIDRIP": "69.64.157.67/32",
  2709. "tags": [],
  2710. "status": "authorized"
  2711. },
  2712. {
  2713. "cIDRIP": "69.64.157.66/32",
  2714. "tags": [],
  2715. "status": "authorized"
  2716. }
  2717. ],
  2718. "description": "More addresses",
  2719. "tags": [],
  2720. "clusterSecurityGroupName": "access1"
  2721. },
  2722. {
  2723. "eC2SecurityGroups": [],
  2724. "iPRanges": [
  2725. {
  2726. "cIDRIP": "67.190.26.136/32",
  2727. "tags": [],
  2728. "status": "authorized"
  2729. },
  2730. {
  2731. "cIDRIP": "69.64.159.20/32",
  2732. "tags": [],
  2733. "status": "authorized"
  2734. },
  2735. {
  2736. "cIDRIP": "52.91.76.245/32",
  2737. "tags": [],
  2738. "status": "authorized"
  2739. },
  2740. {
  2741. "cIDRIP": "69.64.144.0/20",
  2742. "tags": [],
  2743. "status": "authorized"
  2744. },
  2745. {
  2746. "cIDRIP": "54.208.19.24/32",
  2747. "tags": [],
  2748. "status": "authorized"
  2749. },
  2750. {
  2751. "cIDRIP": "174.116.159.187/32",
  2752. "tags": [],
  2753. "status": "authorized"
  2754. }
  2755. ],
  2756. "description": "even more ACLs",
  2757. "tags": [],
  2758. "clusterSecurityGroupName": "access2"
  2759. },
  2760. {
  2761. "eC2SecurityGroups": [],
  2762. "iPRanges": [
  2763. {
  2764. "cIDRIP": "72.182.46.26/32",
  2765. "tags": [],
  2766. "status": "authorized"
  2767. }
  2768. ],
  2769. "description": "ACLs",
  2770. "tags": [],
  2771. "clusterSecurityGroupName": "access3"
  2772. },
  2773. {
  2774. "eC2SecurityGroups": [
  2775. {
  2776. "status": "authorized",
  2777. "eC2SecurityGroupOwnerId": "836073662699",
  2778. "eC2SecurityGroupName": "tableauserver",
  2779. "tags": []
  2780. },
  2781. {
  2782. "status": "authorized",
  2783. "eC2SecurityGroupOwnerId": "836073662699",
  2784. "eC2SecurityGroupName": "default",
  2785. "tags": []
  2786. }
  2787. ],
  2788. "iPRanges": [
  2789. {
  2790. "cIDRIP": "24.18.196.110/32",
  2791. "tags": [
  2792. {
  2793. "value": "Jerry Home",
  2794. "key": "Owner"
  2795. }
  2796. ],
  2797. "status": "authorized"
  2798. },
  2799. {
  2800. "cIDRIP": "54.173.9.88/32",
  2801. "tags": [],
  2802. "status": "authorized"
  2803. },
  2804. {
  2805. "cIDRIP": "69.64.155.184/32",
  2806. "tags": [],
  2807. "status": "authorized"
  2808. },
  2809. {
  2810. "cIDRIP": "108.60.56.18/32",
  2811. "tags": [],
  2812. "status": "authorized"
  2813. },
  2814. {
  2815. "cIDRIP": "97.77.90.0/24",
  2816. "tags": [],
  2817. "status": "authorized"
  2818. },
  2819. {
  2820. "cIDRIP": "107.0.83.90/32",
  2821. "tags": [],
  2822. "status": "authorized"
  2823. },
  2824. {
  2825. "cIDRIP": "10.95.168.100/32",
  2826. "tags": [],
  2827. "status": "authorized"
  2828. },
  2829. {
  2830. "cIDRIP": "198.147.209.15/24",
  2831. "tags": [],
  2832. "status": "authorized"
  2833. },
  2834. {
  2835. "cIDRIP": "99.224.71.116/32",
  2836. "tags": [],
  2837. "status": "authorized"
  2838. },
  2839. {
  2840. "cIDRIP": "69.64.144.7/24",
  2841. "tags": [],
  2842. "status": "authorized"
  2843. },
  2844. {
  2845. "cIDRIP": "50.34.223.215/32",
  2846. "tags": [],
  2847. "status": "authorized"
  2848. },
  2849. {
  2850. "cIDRIP": "69.165.217.223/32",
  2851. "tags": [],
  2852. "status": "authorized"
  2853. },
  2854. {
  2855. "cIDRIP": "99.224.76.13/32",
  2856. "tags": [],
  2857. "status": "authorized"
  2858. },
  2859. {
  2860. "cIDRIP": "69.64.153.252/32",
  2861. "tags": [],
  2862. "status": "authorized"
  2863. },
  2864. {
  2865. "cIDRIP": "72.182.50.151/32",
  2866. "tags": [],
  2867. "status": "authorized"
  2868. },
  2869. {
  2870. "cIDRIP": "99.224.43.75/32",
  2871. "tags": [],
  2872. "status": "authorized"
  2873. },
  2874. {
  2875. "cIDRIP": "198.134.89.186/32",
  2876. "tags": [],
  2877. "status": "authorized"
  2878. }
  2879. ],
  2880. "description": "default",
  2881. "tags": [
  2882. {
  2883. "value": "DefaultRedshft",
  2884. "key": "Name"
  2885. }
  2886. ],
  2887. "clusterSecurityGroupName": "default"
  2888. },
  2889. {
  2890. "eC2SecurityGroups": [],
  2891. "iPRanges": [
  2892. {
  2893. "cIDRIP": "34.204.236.103/32",
  2894. "tags": [],
  2895. "status": "authorized"
  2896. }
  2897. ],
  2898. "description": "Access from proxy VM for VPN access",
  2899. "tags": [],
  2900. "clusterSecurityGroupName": "proxy-vm"
  2901. }
  2902. ]
  2903. },
  2904. "requestID": "b6528afd-9d95-11e7-8f90-e9207bd3d747",
  2905. "eventID": "c421ad2b-4753-45fa-84fb-d24fc1d0311c",
  2906. "eventType": "AwsApiCall",
  2907. "recipientAccountId": "836073662699"
  2908. },
  2909. {
  2910. "eventVersion": "1.04",
  2911. "userIdentity": {
  2912. "type": "IAMUser",
  2913. "principalId": "AIDAILUTBF5H2JPTYJPAM",
  2914. "arn": "arn:aws:iam::836073662699:user/jerry.hutchison@rightside.co",
  2915. "accountId": "836073662699",
  2916. "accessKeyId": "ASIAIN2CLER45LBXZ4HA",
  2917. "userName": "jerry.hutchison@rightside.co",
  2918. "sessionContext": {
  2919. "attributes": {
  2920. "mfaAuthenticated": "false",
  2921. "creationDate": "2017-09-19T14:11:46Z"
  2922. }
  2923. },
  2924. "invokedBy": "signin.amazonaws.com"
  2925. },
  2926. "eventTime": "2017-09-19T23:55:20Z",
  2927. "eventSource": "redshift.amazonaws.com",
  2928. "eventName": "DescribeClusterSecurityGroups",
  2929. "awsRegion": "us-east-1",
  2930. "sourceIPAddress": "24.18.192.230",
  2931. "userAgent": "signin.amazonaws.com",
  2932. "requestParameters": null,
  2933. "responseElements": {
  2934. "clusterSecurityGroups": [
  2935. {
  2936. "eC2SecurityGroups": [],
  2937. "iPRanges": [
  2938. {
  2939. "cIDRIP": "76.178.88.240/32",
  2940. "tags": [],
  2941. "status": "authorized"
  2942. },
  2943. {
  2944. "cIDRIP": "54.175.102.28/32",
  2945. "tags": [
  2946. {
  2947. "value": "looking_glass",
  2948. "key": "Name"
  2949. }
  2950. ],
  2951. "status": "authorized"
  2952. },
  2953. {
  2954. "cIDRIP": "70.112.13.35/32",
  2955. "tags": [],
  2956. "status": "authorized"
  2957. },
  2958. {
  2959. "cIDRIP": "72.179.22.90/32",
  2960. "tags": [
  2961. {
  2962. "value": "Scott Ryder Home",
  2963. "key": "Owner"
  2964. }
  2965. ],
  2966. "status": "authorized"
  2967. },
  2968. {
  2969. "cIDRIP": "50.34.162.34/32",
  2970. "tags": [
  2971. {
  2972. "value": "Kevin Fink Home",
  2973. "key": "Owner"
  2974. }
  2975. ],
  2976. "status": "authorized"
  2977. },
  2978. {
  2979. "cIDRIP": "76.178.93.38/32",
  2980. "tags": [],
  2981. "status": "authorized"
  2982. },
  2983. {
  2984. "cIDRIP": "52.0.99.159/32",
  2985. "tags": [
  2986. {
  2987. "value": "looking_glass_stg",
  2988. "key": "Name"
  2989. }
  2990. ],
  2991. "status": "authorized"
  2992. },
  2993. {
  2994. "cIDRIP": "98.203.243.147/32",
  2995. "tags": [
  2996. {
  2997. "value": "Drew MacPherson Home",
  2998. "key": "Owner"
  2999. }
  3000. ],
  3001. "status": "authorized"
  3002. },
  3003. {
  3004. "cIDRIP": "52.0.74.74/32",
  3005. "tags": [],
  3006. "status": "authorized"
  3007. },
  3008. {
  3009. "cIDRIP": "67.79.8.126/32",
  3010. "tags": [],
  3011. "status": "authorized"
  3012. },
  3013. {
  3014. "cIDRIP": "52.5.227.171/32",
  3015. "tags": [
  3016. {
  3017. "value": "DSS Dev1",
  3018. "key": "Owner"
  3019. }
  3020. ],
  3021. "status": "authorized"
  3022. },
  3023. {
  3024. "cIDRIP": "50.170.31.147/32",
  3025. "tags": [
  3026. {
  3027. "value": "Carolyn at home",
  3028. "key": "Name"
  3029. }
  3030. ],
  3031. "status": "authorized"
  3032. },
  3033. {
  3034. "cIDRIP": "173.160.205.246/32",
  3035. "tags": [],
  3036. "status": "authorized"
  3037. },
  3038. {
  3039. "cIDRIP": "54.152.32.20/32",
  3040. "tags": [],
  3041. "status": "authorized"
  3042. },
  3043. {
  3044. "cIDRIP": "149.11.36.178/32",
  3045. "tags": [],
  3046. "status": "authorized"
  3047. },
  3048. {
  3049. "cIDRIP": "99.224.130.177/32",
  3050. "tags": [
  3051. {
  3052. "value": "Kelvin Osborne Home",
  3053. "key": "Owner"
  3054. }
  3055. ],
  3056. "status": "authorized"
  3057. },
  3058. {
  3059. "cIDRIP": "54.152.143.252/32",
  3060. "tags": [],
  3061. "status": "authorized"
  3062. },
  3063. {
  3064. "cIDRIP": "73.157.1.96/32",
  3065. "tags": [
  3066. {
  3067. "value": "Drew MacPherson Home",
  3068. "key": "Owner"
  3069. }
  3070. ],
  3071. "status": "authorized"
  3072. },
  3073. {
  3074. "cIDRIP": "54.152.133.246/32",
  3075. "tags": [],
  3076. "status": "authorized"
  3077. }
  3078. ],
  3079. "description": "Test to see if I can add more access rules",
  3080. "tags": [],
  3081. "clusterSecurityGroupName": "access"
  3082. },
  3083. {
  3084. "eC2SecurityGroups": [],
  3085. "iPRanges": [
  3086. {
  3087. "cIDRIP": "198.134.93.234/32",
  3088. "tags": [
  3089. {
  3090. "value": "Nate Gillespie",
  3091. "key": "Owner"
  3092. }
  3093. ],
  3094. "status": "authorized"
  3095. },
  3096. {
  3097. "cIDRIP": "174.16.221.227/32",
  3098. "tags": [
  3099. {
  3100. "value": "Nate Gillespie",
  3101. "key": "Owner"
  3102. }
  3103. ],
  3104. "status": "authorized"
  3105. },
  3106. {
  3107. "cIDRIP": "69.64.157.89/32",
  3108. "tags": [],
  3109. "status": "authorized"
  3110. },
  3111. {
  3112. "cIDRIP": "69.64.157.12/32",
  3113. "tags": [],
  3114. "status": "authorized"
  3115. },
  3116. {
  3117. "cIDRIP": "69.64.144.72/32",
  3118. "tags": [],
  3119. "status": "authorized"
  3120. },
  3121. {
  3122. "cIDRIP": "69.64.144.130/32",
  3123. "tags": [
  3124. {
  3125. "value": "Kirkland VPN",
  3126. "key": "Name"
  3127. }
  3128. ],
  3129. "status": "authorized"
  3130. },
  3131. {
  3132. "cIDRIP": "52.7.30.104/32",
  3133. "tags": [
  3134. {
  3135. "value": "DSS Dev2",
  3136. "key": "Owner"
  3137. }
  3138. ],
  3139. "status": "authorized"
  3140. },
  3141. {
  3142. "cIDRIP": "69.64.157.67/32",
  3143. "tags": [],
  3144. "status": "authorized"
  3145. },
  3146. {
  3147. "cIDRIP": "69.64.157.66/32",
  3148. "tags": [],
  3149. "status": "authorized"
  3150. }
  3151. ],
  3152. "description": "More addresses",
  3153. "tags": [],
  3154. "clusterSecurityGroupName": "access1"
  3155. },
  3156. {
  3157. "eC2SecurityGroups": [],
  3158. "iPRanges": [
  3159. {
  3160. "cIDRIP": "67.190.26.136/32",
  3161. "tags": [],
  3162. "status": "authorized"
  3163. },
  3164. {
  3165. "cIDRIP": "69.64.159.20/32",
  3166. "tags": [],
  3167. "status": "authorized"
  3168. },
  3169. {
  3170. "cIDRIP": "52.91.76.245/32",
  3171. "tags": [],
  3172. "status": "authorized"
  3173. },
  3174. {
  3175. "cIDRIP": "69.64.144.0/20",
  3176. "tags": [],
  3177. "status": "authorized"
  3178. },
  3179. {
  3180. "cIDRIP": "54.208.19.24/32",
  3181. "tags": [],
  3182. "status": "authorized"
  3183. },
  3184. {
  3185. "cIDRIP": "174.116.159.187/32",
  3186. "tags": [],
  3187. "status": "authorized"
  3188. }
  3189. ],
  3190. "description": "even more ACLs",
  3191. "tags": [],
  3192. "clusterSecurityGroupName": "access2"
  3193. },
  3194. {
  3195. "eC2SecurityGroups": [],
  3196. "iPRanges": [
  3197. {
  3198. "cIDRIP": "72.182.46.26/32",
  3199. "tags": [],
  3200. "status": "authorized"
  3201. }
  3202. ],
  3203. "description": "ACLs",
  3204. "tags": [],
  3205. "clusterSecurityGroupName": "access3"
  3206. },
  3207. {
  3208. "eC2SecurityGroups": [
  3209. {
  3210. "status": "authorized",
  3211. "eC2SecurityGroupOwnerId": "836073662699",
  3212. "eC2SecurityGroupName": "tableauserver",
  3213. "tags": []
  3214. },
  3215. {
  3216. "status": "authorized",
  3217. "eC2SecurityGroupOwnerId": "836073662699",
  3218. "eC2SecurityGroupName": "default",
  3219. "tags": []
  3220. }
  3221. ],
  3222. "iPRanges": [
  3223. {
  3224. "cIDRIP": "24.18.196.110/32",
  3225. "tags": [
  3226. {
  3227. "value": "Jerry Home",
  3228. "key": "Owner"
  3229. }
  3230. ],
  3231. "status": "authorized"
  3232. },
  3233. {
  3234. "cIDRIP": "54.173.9.88/32",
  3235. "tags": [],
  3236. "status": "authorized"
  3237. },
  3238. {
  3239. "cIDRIP": "69.64.155.184/32",
  3240. "tags": [],
  3241. "status": "authorized"
  3242. },
  3243. {
  3244. "cIDRIP": "108.60.56.18/32",
  3245. "tags": [],
  3246. "status": "authorized"
  3247. },
  3248. {
  3249. "cIDRIP": "97.77.90.0/24",
  3250. "tags": [],
  3251. "status": "authorized"
  3252. },
  3253. {
  3254. "cIDRIP": "107.0.83.90/32",
  3255. "tags": [],
  3256. "status": "authorized"
  3257. },
  3258. {
  3259. "cIDRIP": "10.95.168.100/32",
  3260. "tags": [],
  3261. "status": "authorized"
  3262. },
  3263. {
  3264. "cIDRIP": "198.147.209.15/24",
  3265. "tags": [],
  3266. "status": "authorized"
  3267. },
  3268. {
  3269. "cIDRIP": "99.224.71.116/32",
  3270. "tags": [],
  3271. "status": "authorized"
  3272. },
  3273. {
  3274. "cIDRIP": "69.64.144.7/24",
  3275. "tags": [],
  3276. "status": "authorized"
  3277. },
  3278. {
  3279. "cIDRIP": "50.34.223.215/32",
  3280. "tags": [],
  3281. "status": "authorized"
  3282. },
  3283. {
  3284. "cIDRIP": "69.165.217.223/32",
  3285. "tags": [],
  3286. "status": "authorized"
  3287. },
  3288. {
  3289. "cIDRIP": "99.224.76.13/32",
  3290. "tags": [],
  3291. "status": "authorized"
  3292. },
  3293. {
  3294. "cIDRIP": "69.64.153.252/32",
  3295. "tags": [],
  3296. "status": "authorized"
  3297. },
  3298. {
  3299. "cIDRIP": "72.182.50.151/32",
  3300. "tags": [],
  3301. "status": "authorized"
  3302. },
  3303. {
  3304. "cIDRIP": "99.224.43.75/32",
  3305. "tags": [],
  3306. "status": "authorized"
  3307. },
  3308. {
  3309. "cIDRIP": "198.134.89.186/32",
  3310. "tags": [],
  3311. "status": "authorized"
  3312. }
  3313. ],
  3314. "description": "default",
  3315. "tags": [
  3316. {
  3317. "value": "DefaultRedshft",
  3318. "key": "Name"
  3319. }
  3320. ],
  3321. "clusterSecurityGroupName": "default"
  3322. },
  3323. {
  3324. "eC2SecurityGroups": [],
  3325. "iPRanges": [
  3326. {
  3327. "cIDRIP": "34.204.236.103/32",
  3328. "tags": [],
  3329. "status": "authorized"
  3330. }
  3331. ],
  3332. "description": "Access from proxy VM for VPN access",
  3333. "tags": [],
  3334. "clusterSecurityGroupName": "proxy-vm"
  3335. }
  3336. ]
  3337. },
  3338. "requestID": "fdd9b25f-9d95-11e7-b94d-ad0be3b0bac3",
  3339. "eventID": "df90c307-8a2f-45ae-98f0-374c0174c73e",
  3340. "eventType": "AwsApiCall",
  3341. "recipientAccountId": "836073662699"
  3342. },
  3343. {
  3344. "eventVersion": "1.05",
  3345. "userIdentity": {
  3346. "type": "IAMUser",
  3347. "principalId": "AIDAJE4OISGTZNKQGSORC",
  3348. "arn": "arn:aws:iam::836073662699:user/DizzyNinja",
  3349. "accountId": "836073662699",
  3350. "accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
  3351. "userName": "DizzyNinja"
  3352. },
  3353. "eventTime": "2017-09-19T23:55:00Z",
  3354. "eventSource": "ec2.amazonaws.com",
  3355. "eventName": "DescribeInstances",
  3356. "awsRegion": "us-east-1",
  3357. "sourceIPAddress": "107.22.20.81",
  3358. "userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
  3359. "requestParameters": {
  3360. "instancesSet": {},
  3361. "filterSet": {}
  3362. },
  3363. "responseElements": null,
  3364. "requestID": "39869640-5f82-41a8-a82b-d24f3b009715",
  3365. "eventID": "e8352f91-dcff-4caf-b8ba-30a168a5ab9d",
  3366. "eventType": "AwsApiCall",
  3367. "recipientAccountId": "836073662699"
  3368. }
  3369. ]
  3370. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement