Die vorliegende Übersetzung wurde maschinell erstellt. Im Falle eines Konflikts oder eines Widerspruchs zwischen dieser übersetzten Fassung und der englischen Fassung (einschließlich infolge von Verzögerungen bei der Übersetzung) ist die englische Fassung maßgeblich.
# Überwachung der Compute Optimizer Optimizer-Automatisierung
Die Überwachung ist ein wichtiger Bestandteil der Aufrechterhaltung der Zuverlässigkeit, Verfügbarkeit und Leistung von Compute Optimizer Automation und Ihren anderen AWS Lösungen. AWS bietet die folgenden Überwachungstools, um Compute Optimizer Automation zu beobachten, zu melden, wenn etwas nicht stimmt, und gegebenenfalls automatische Maßnahmen zu ergreifen:
+ *AWS CloudTrail* erfasst API-Aufrufe und zugehörige Ereignisse, die von oder im Namen Ihres AWS-Konto -Kontos erfolgten, und übermittelt die Protokolldateien an einen von Ihnen angegebenen Amazon-S3-Bucket. Sie können die Benutzer und Konten, die AWS aufgerufen haben, identifizieren, sowie die Quell-IP-Adresse, von der diese Aufrufe stammen, und den Zeitpunkt der Aufrufe ermitteln. Weitere Informationen finden Sie im [AWS CloudTrail -Benutzerhandbuch](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/).
*Amazon EventBridge* ist ein serverloser Event-Bus-Service, der es einfach macht, Ihre Anwendungen mit Daten aus einer Vielzahl von Quellen zu verbinden. EventBridge liefert einen Stream von Echtzeitdaten aus Ihren eigenen Anwendungen, Software-as-a-Service (SaaS-) Anwendungen und AWS Diensten und leitet diese Daten an Ziele wie Lambda weiter. Auf diese Weise können Sie Ereignisse überwachen, die in Services auftreten, und ereignisgesteuerte Architekturen erstellen. Weitere Informationen finden Sie im [ EventBridge Amazon-Benutzerhandbuch](https://docs.aws.amazon.com/eventbridge/latest/userguide/).
# Protokollieren von AWS Compute Optimizer Automation-API-Aufrufen mit AWS CloudTrail
AWS Compute Optimizer Automation ist in einen Dienst integriert [AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html), der eine Aufzeichnung der von einem Benutzer, einer Rolle oder einem AWS-Service ausgeführten Aktionen bereitstellt. CloudTrail erfasst alle API-Aufrufe für Compute Optimizer Automation als Ereignisse. Zu den erfassten Aufrufen gehören Aufrufe von der Compute Optimizer Automation-Konsole und Code-Aufrufe der Compute Optimizer Automation-API-Operationen. Anhand der von gesammelten Informationen können Sie die Anfrage CloudTrail, die an Compute Optimizer Automation gestellt wurde, die IP-Adresse, von der aus die Anfrage gestellt wurde, wann sie gestellt wurde, und weitere Details ermitteln.
Jeder Ereignis- oder Protokolleintrag enthält Informationen zu dem Benutzer, der die Anforderung generiert hat. Die Identitätsinformationen unterstützen Sie bei der Ermittlung der folgenden Punkte:
+ Ob die Anforderung mit Anmeldeinformationen des Root-Benutzers oder des Benutzers gestellt wurde.
+ Die Anforderung wurde im Namen eines IAM-Identity-Center-Benutzers erstellt.
+ Gibt an, ob die Anforderung mit temporären Sicherheitsanmeldeinformationen für eine Rolle oder einen Verbundbenutzer gesendet wurde.
+ Ob die Anforderung aus einem anderen AWS-Service gesendet wurde.
CloudTrail ist in Ihrem aktiv AWS-Konto , wenn Sie das Konto erstellen, und Sie haben automatisch Zugriff auf den CloudTrail **Eventverlauf**. Der CloudTrail **Ereignisverlauf** bietet eine einsehbare, durchsuchbare, herunterladbare und unveränderliche Aufzeichnung der aufgezeichneten Verwaltungsereignisse der letzten 90 Tage in einem. AWS-Region Weitere Informationen finden Sie im *AWS CloudTrail Benutzerhandbuch* unter [Arbeiten mit dem CloudTrail Ereignisverlauf](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html). Für die Anzeige des **Eventverlaufs CloudTrail** fallen keine Gebühren an.
Für eine fortlaufende Aufzeichnung der Ereignisse in AWS-Konto den letzten 90 Tagen erstellen Sie einen Trail- oder [CloudTrailLake-Event-Datenspeicher](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html).
**CloudTrail Pfade**
Ein *Trail* ermöglicht CloudTrail die Übermittlung von Protokolldateien an einen Amazon S3 S3-Bucket. Alle mit dem erstellten Pfade AWS-Managementkonsole sind regionsübergreifend. Sie können mithilfe von AWS CLI einen Einzel-Region- oder einen Multi-Region-Trail erstellen. Es wird empfohlen, einen Trail mit mehreren Regionen zu erstellen, da Sie alle Aktivitäten AWS-Regionen in Ihrem Konto erfassen. Wenn Sie einen Einzel-Region-Trail erstellen, können Sie nur die Ereignisse anzeigen, die im AWS-Region des Trails protokolliert wurden. Weitere Informationen zu Trails finden Sie unter [Erstellen eines Trails für Ihr AWS-Konto](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trail.html) und [Erstellen eines Trails für eine Organisation](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html) im *AWS CloudTrail -Benutzerhandbuch*.
Sie können eine Kopie Ihrer laufenden Verwaltungsereignisse kostenlos an Ihren Amazon S3 S3-Bucket senden, CloudTrail indem Sie einen Trail erstellen. Es fallen jedoch Amazon S3 S3-Speichergebühren an. Weitere Informationen zur CloudTrail Preisgestaltung finden Sie unter [AWS CloudTrail Preise](https://aws.amazon.com/cloudtrail/pricing/). Informationen zu Amazon-S3-Preisen finden Sie unter [Amazon S3 – Preise](https://aws.amazon.com/s3/pricing/).
**CloudTrail Datenspeicher für Ereignisse in Lake**
CloudTrail Mit *Lake* können Sie SQL-basierte Abfragen für Ihre Ereignisse ausführen. CloudTrail [Lake konvertiert bestehende Ereignisse im zeilenbasierten JSON-Format in das Apache ORC-Format.](https://orc.apache.org/) ORC ist ein spaltenförmiges Speicherformat, das für den schnellen Abruf von Daten optimiert ist. Die Ereignisse werden in *Ereignisdatenspeichern* zusammengefasst, bei denen es sich um unveränderliche Sammlungen von Ereignissen handelt, die auf Kriterien basieren, die Sie mit Hilfe von [erweiterten Ereignisselektoren](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-concepts.html#adv-event-selectors) auswählen. Die Selektoren, die Sie auf einen Ereignisdatenspeicher anwenden, steuern, welche Ereignisse bestehen bleiben und für Sie zur Abfrage verfügbar sind. *Weitere Informationen zu CloudTrail Lake finden Sie unter [Arbeiten mit AWS CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) im AWS CloudTrail Benutzerhandbuch.*
CloudTrail Für das Speichern und Abfragen von Ereignisdaten in Lake fallen Kosten an. Beim Erstellen eines Ereignisdatenspeichers wählen Sie die [Preisoption](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html#cloudtrail-lake-manage-costs-pricing-option) aus, die für den Ereignisdatenspeicher genutzt werden soll. Die Preisoption bestimmt die Kosten für die Erfassung und Speicherung von Ereignissen sowie die standardmäßige und maximale Aufbewahrungsdauer für den Ereignisdatenspeicher. Weitere Informationen zur CloudTrail Preisgestaltung finden Sie unter [AWS CloudTrail Preise](https://aws.amazon.com/cloudtrail/pricing/).
## Verwaltungsereignisse von Compute Optimizer Automation in CloudTrail
[Verwaltungsereignisse](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events) bieten Informationen über Verwaltungsvorgänge, die an Ressourcen in Ihrem AWS-Konto ausgeführt werden. Sie werden auch als Vorgänge auf Steuerebene bezeichnet. CloudTrail Protokolliert standardmäßig Verwaltungsereignisse.
AWS Compute Optimizer Automation protokolliert alle Operationen auf der Compute Optimizer Automation-Steuerebene als Managementereignisse. Eine Liste der AWS Compute Optimizer Automation-Steuerebenenoperationen, die Compute Optimizer Automation protokolliert CloudTrail, finden Sie in der [AWS Compute Optimizer Automation API-Referenz](https://docs.aws.amazon.com/Provide API url).
## Beispiele für Compute Optimizer Automation-Ereignisse
Ein Ereignis stellt eine einzelne Anfrage aus einer beliebigen Quelle dar und enthält Informationen über den angeforderten API-Vorgang, Datum und Uhrzeit des Vorgangs, Anforderungsparameter usw. CloudTrail Protokolldateien sind kein geordneter Stack-Trace der öffentlichen API-Aufrufe, sodass Ereignisse nicht in einer bestimmten Reihenfolge angezeigt werden.
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ThrottlingException` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T20:23:42Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:50:12Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetEnrollmentConfiguration",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "2f3a4012-f005-4d83-9042-1639a80c54ce",
"eventID": "29ea5225-2dd6-486f-9bfe-caf7a81c3bab",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"errorCode": "ThrottlingException",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `AccessDenied` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/ReadOnly/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/ReadOnly",
"accountId": "111122223333",
"userName": "ReadOnly"
},
"attributes": {
"creationDate": "2025-11-06T19:48:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:50:12Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetEnrollmentConfiguration",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "3f4a5013-f106-4e84-9143-1740b91d55df",
"eventID": "30fb6336-3ee7-597g-0cgf-dbg8b92d4cbc",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"errorCode": "AccessDenied",
"errorMessage": "User: arn:aws:sts::111122223333:assumed-role/ReadOnly/john-doe is not authorized to perform: aco-automation:GetEnrollmentConfiguration because no identity-based policy allows the aco-automation:GetEnrollmentConfiguration action",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `NetworkEvent` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-07T04:23:51Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:48Z",
"eventSource": "aco-automation.amazonaws.com",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "4g5b6024-g217-5f95-0254-2851c02e66eg",
"eventID": "41gc7447-4ff8-608h-1dgh-ech9c03e5dcd",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"eventName": "GetEnrollmentConfiguration",
"requestParameters": null,
"responseElements": null,
"sharedEventID": "c50cba87-2fb0-4458-b9fb-3c5e0f077718",
"vpcEndpointId": "AWS Internal",
"vpcEndpointAccountId": "AWS Internal",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `GetEnrollmentConfiguration` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROASVBPKTAKQR6L32DI4",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:48Z",
"eventSource": "aco-automation.amazonaws.com",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "5h6c7135-h328-6ga6-1365-3962d13f77fh",
"eventID": "52hd8558-5gg9-719i-2ehi-fdi0d14f6ede",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"eventName": "GetEnrollmentConfiguration",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListAccounts` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "AuthenticatedComputeOptimizerRole"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:48Z",
"eventSource": "aco-automation.amazonaws.com",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "6i7d8246-i439-7hb7-2476-4073e24g88gi",
"eventID": "63ie9669-6hh0-820j-3fij-gej1e25g7fef",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"eventName": "ListAccounts",
"requestParameters": {
"maxResults": 50
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `GetAutomationRule` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "abcdef01234567890;",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:24:01Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetAutomationRule",
"awsRegion": "us-east-1",
"eventTime": "2025-11-06T04:24:01Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "7j8e9357-j540-8ic8-3587-5184f35h99hj",
"eventID": "74jf0770-7ii1-931k-4gjk-hfk2f36h8gfg",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleArn": "arn:aws:compute-optimizer::123456789012:automation-rule/123AbcdEfGHi1jkL"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListAutomationRules` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:21:59Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationRules",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "8k9f0468-k651-9jd9-4698-6295g46i00ik",
"eventID": "85kg1881-8jj2-042l-5hkl-igl3g47i9hgh",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListTagsForResource` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:33:00Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListTagsForResource",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "9l0g1579-l762-0ke0-5709-7306h57j11jl",
"eventID": "96lh2992-9kk3-153m-6ilm-jhm4h58j0ihi",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"resourceArn": "arn:aws:compute-optimizer::111122223333:automation-rule/035Pcy46SStQHe0A"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListAutomationRulePreview` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T19:31:22Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:31:28Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationRulePreview",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "0m1h2680-m873-1lf1-6810-8417i68k22km",
"eventID": "07mi3003-0ll4-264n-7jmn-kin5i69k1jij",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true, Note: Please be mindful when interacting with displayed links.
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleType": "OrganizationRule",
"organizationScope": {
"accountIds": [
"535045952558"
]
},
"recommendedActionTypes": [
"UpgradeEbsVolumeType",
"SnapshotAndDeleteUnattachedEbsVolume"
],
"criteria": {
"region": [{
"comparison": "StringEquals",
"values": [
"us-east-1",
"us-west-2"
]
}],
"resourceArn": [{
"comparison": "StringLike",
"values": [
"vol-"
]
}]
},
"maxResults": 100
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListAutomationRulePreviewSummaries` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T19:14:49Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:21:52Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationRulePreviewSummaries",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "1n2i3791-n984-2mg2-7921-9528j79l33ln",
"eventID": "18nj4114-1mm5-375o-8kon-ljo6j70l2kjk",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleType": "AccountRule",
"recommendedActionTypes": [
"SnapshotAndDeleteUnattachedEbsVolume"
]
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListRecommendedActions` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:27:20Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListRecommendedActions",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "2o3j4802-o095-3nh3-8032-0639k80m44mo",
"eventID": "29ok5225-2nn6-486p-9lop-mqp7k81m3lkl",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListRecommendedActionSummaries` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:31:59Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListRecommendedActionSummaries",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "3p4k5913-p106-4oi4-9143-1740l91n55np",
"eventID": "30pl6336-3oo7-597q-0dqp-nrq8l92n4mlm",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `GetAutomationEvent` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:25:20Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetAutomationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "4q5l6024-q217-5pj5-0254-2851m02o66oq",
"eventID": "41qm7447-4pp8-608r-1eqr-srr9m03o5nmn",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"eventId": "a12cb3d4e5f67g0h"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListAutomationEvents` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:24:32Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationEvents",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "5r6m7135-r328-6qk6-1365-3962n13p77pr",
"eventID": "52rn8558-5qq9-719s-2frs-tss0n14p6ono",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListAutomationEventSteps` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:28:10Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationEventSteps",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "6s7n8246-s439-7rl7-2476-4073o24q88qs",
"eventID": "63so9669-6rr0-820t-3gst-utt1o25q7pop",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"eventId": "a12cb3d4e5f67g0h"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `ListAutomationEventSummaries` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:31:03Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationEventSummaries",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "7t8o9357-t540-8sm8-3587-5184p35r99rt",
"eventID": "74tp0770-7ss1-931u-4htu-vuv2p36r8qpq",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `UpdateEnrollmentConfiguration` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "USER NAME"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:46Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "UpdateEnrollmentConfiguration",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "8u9p0468-u651-9tn9-4698-6295q46s00su",
"eventID": "85uq1881-8tt2-042v-5iuv-wvw3q47s9rqr",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"status": "Active",
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"status": "Active",
"lastUpdatedTimestamp": "Nov 5, 2025, 8:23:46 PM"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `AssociateAccounts` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "AuthenticatedComputeOptimizerRole"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:45Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "AssociateAccounts",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "9v0q1579-v762-0uo0-5709-7306r57t11tv",
"eventID": "96vr2992-9uu3-153w-6jvw-xwx4r58t0srs",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"errorCode": "InvalidParameterValueException",
"errorMessage": "The management account or the delegated administrator doesn't have access to this member account.",
"requestParameters": {
"accountIds": [
"123456789012"
],
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `DisassociateAccounts` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "AuthenticatedComputeOptimizerRole"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:47Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "DisassociateAccounts",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "0w1r2680-w873-1vp1-6810-8417s68u22uw",
"eventID": "07ws3003-0vv4-264x-7kwx-yxy5s69u1tst",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"accountIds": [
"123456789012"
],
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"accountIds": [
"123456789012"
]
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `CreateAutomationRule` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/*****************",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:20:00Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "CreateAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "1x2s3791-x984-2wq2-7921-9528t79v33vx",
"eventID": "18xt4114-1ww5-375y-8lxy-zyz6t70v2utu",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleName": "TestRule",
"ruleType": "AccountRule",
"recommendedActionTypes": [
"SnapshotAndDeleteUnattachedEbsVolume"
],
"schedule": {
"scheduleExpression": "cron(0 2 * * ? *)",
"scheduleExpressionTimezone": "UTC",
"executionWindowInMinutes": 60
},
"status": "Active",
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"ruleArn": "arn:aws:compute-optimizer::123456789012:automation-rule/123AbcdEfGHi1jkL",
"ruleId": "123AbcdEfGHi1jkL",
"name": "SourabTestRule",
"ruleType": "AccountRule",
"ruleRevision": 1,
"priority": "1E-30",
"recommendedActionTypes": [
"SnapshotAndDeleteUnattachedEbsVolume"
],
"criteria": {
"region": [{
"comparison": "StringEquals",
"values": [
"us-east-1"
]
}]
},
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"ruleArn": "arn:aws:compute-optimizer:us-east-1:111122223333:automation-rule/123AbcdEfGHi1jkL"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `DeleteAutomationRule` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:26:15Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "DeleteAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "3z4u5913-z106-4ys4-9143-1740v91x55xz",
"eventID": "30zv6336-3yy7-597a-0eza-b1b8v92x4wvw",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleArn": "arn:aws:compute-optimizer::111122223333:automation-rule/123AbcdEfGHi1jkL"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `UpdateAutomationRule` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:22:30Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "UpdateAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "2y3t4802-y095-3xr3-8032-0639u80w44wy",
"eventID": "29yu5225-2xx6-486z-9myz-a0a7u81w3vuv",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleArn": "arn:aws:compute-optimizer:us-east-1:123456789012:automation-rule/123AbcdEfGHi1jkL",
"status": "Active"
},
"responseElements": {
"ruleArn": "arn:aws:compute-optimizer:us-east-1:123456789012:automation-rule/123AbcdEfGHi1jkL"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `TagResource` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:22:37Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "TagResource",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "6c7x8246-c439-7bv7-2476-4073y24a99ab",
"eventID": "63cy9669-6bb0-820d-3hcd-ede2y25a7bab",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"resourceArn": "arn:aws:compute-optimizer::111122223333:automation-rule/123AbcdEfGHi1jkL",
"ruleRevision": 1,
"tags": [{
"key": "test",
"value": "cloudtrail"
}]
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `UntagResource` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID"
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:33:09Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "UntagResource",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "7d8y9357-d540-8cw8-3587-5184z35b00bc",
"eventID": "74dz0770-7cc1-931e-4ide-fef3z36b8cbc",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"resourceArn": "arn:aws:compute-optimizer::111122223333:automation-rule/123AbcdEfGHi1jkL",
"ruleRevision": 2,
"tagKeys": [
"test"
]
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `RollbackAutomationEvent` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T19:31:22Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:35:59Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "RollbackAutomationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "8e9z0468-e651-9dx9-4698-6295a46c11cd",
"eventID": "85ea1881-8dd2-042f-5jef-gfg4a47c9dcd",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"eventId": "a52cb5d6d8f24e0c",
"clientToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": {
"eventId": "a52cb5d6d8f24e0c",
"eventStatus": "ROLLBACK_READY"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Das folgende Beispiel zeigt ein CloudTrail Ereignis, das den `StartAutomationEvent` Vorgang demonstriert.
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID"
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:27:46Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "StartAutomationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "9f0a1579-f762-0ey0-5709-7306b57d22de",
"eventID": "96fb2992-9ee3-153g-6kfg-hgh5b58d0ede",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"recommendedActionId": "aa112223333a4444"
},
"responseElements": {
"recommendedActionId": "aa112223333a4444",
"eventId": "a12cb3d4e5f67g0h",
"status": "READY"
}
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
Informationen zu CloudTrail Datensatzinhalten finden Sie im *AWS CloudTrail Benutzerhandbuch* unter [CloudTrailDatensatzinhalt](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-record-contents.html).