Este guia documenta o novo console de administração do AWS Wickr, lançado em 13 de março de 2025. Para obter a documentação sobre a versão clássica do console de administração do AWS Wickr, consulte o Classic Administration Guide.
As traduções são geradas por tradução automática. Em caso de conflito entre o conteúdo da tradução e da versão original em inglês, a versão em inglês prevalecerá.
Noções básicas sobre as entradas do arquivo de log do Wickr
Uma trilha é uma configuração que permite a entrega de eventos como arquivos de log para um bucket do Amazon S3 que você especificar. CloudTrail os arquivos de log contêm uma ou mais entradas de log. Um evento representa uma única solicitação de qualquer fonte e inclui informações sobre a ação solicitada, a data e a hora da ação, os parâmetros da solicitação e assim por diante. CloudTrail os arquivos de log não são um rastreamento de pilha ordenado das chamadas públicas de API, portanto, eles não aparecem em nenhuma ordem específica.
O exemplo a seguir mostra uma entrada de CloudTrail registro que demonstra a CreateAdminSession ação.
{ "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "accessKeyId": "<access-key-id>", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "userName": "<user-name>" }, "webIdFederationData": {}, "attributes": { "creationDate": "2023-03-10T07:53:17Z", "mfaAuthenticated": "false" } } }, "eventTime": "2023-03-10T08:19:24Z", "eventSource": "wickr.amazonaws.com", "eventName": "CreateAdminSession", "awsRegion": "us-east-1", "sourceIPAddress": "<ip-address>", "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36", "requestParameters": { "networkId": 56019692 }, "responseElements": { "sessionCookie": "***", "sessionNonce": "***" }, "requestID": "39ed0e6f-36e9-460d-8a6e-f24be0ec11c5", "eventID": "98ccb633-0e6c-4325-8996-35c3043022ac", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "<account-id>", "eventCategory": "Management" }
O exemplo a seguir mostra uma entrada de CloudTrail registro que demonstra a CreateNetwork ação.
{ "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "accessKeyId": "<access-key-id>", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "userName": "<user-name>" }, "webIdFederationData": {}, "attributes": { "creationDate": "2023-03-10T07:53:17Z", "mfaAuthenticated": "false" } } }, "eventTime": "2023-03-10T07:54:09Z", "eventSource": "wickr.amazonaws.com", "eventName": "CreateNetwork", "awsRegion": "us-east-1", "sourceIPAddress": "<ip-address>", "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36", "requestParameters": { "networkName": "BOT_Network", "accessLevel": "3000" }, "responseElements": null, "requestID": "b83c0b6e-73ae-45b6-8c85-9910f64d33a1", "eventID": "551277bb-87e0-4e66-b2a0-3cc1eff303f3", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "<account-id>", "eventCategory": "Management" }
O exemplo a seguir mostra uma entrada de CloudTrail registro que demonstra a ListNetworks ação.
{ "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "accessKeyId": "<access-key-id>", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "userName": "<user-name>" }, "webIdFederationData": {}, "attributes": { "creationDate": "2023-03-10T12:19:39Z", "mfaAuthenticated": "false" } } }, "eventTime": "2023-03-10T12:29:32Z", "eventSource": "wickr.amazonaws.com", "eventName": "ListNetworks", "awsRegion": "us-east-1", "sourceIPAddress": "<ip-address>", "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36", "requestParameters": null, "responseElements": null, "requestID": "b9800ba8-541a-43d1-9c8e-efd94d5f2115", "eventID": "5fbc83d7-771b-457d-9329-f85163a6a428", "readOnly": true, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "<account-id>", "eventCategory": "Management" }
O exemplo a seguir mostra uma entrada de CloudTrail registro que demonstra a UpdateNetworkdetails ação.
{ "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "accessKeyId": "<access-key-id>", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "userName": "<user-name>" }, "webIdFederationData": {}, "attributes": { "creationDate": "2023-03-08T22:42:15Z", "mfaAuthenticated": "false" } } }, "eventTime": "2023-03-08T22:42:58Z", "eventSource": "wickr.amazonaws.com", "eventName": "UpdateNetworkDetails", "awsRegion": "us-east-1", "sourceIPAddress": "<ip-address>", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36", "requestParameters": { "networkName": "CloudTrailTest1", "networkId":<network-id>}, "responseElements": null, "requestID": "abced980-23c7-4de1-b3e3-56aaf0e1fdbb", "eventID": "a4dc3391-bdce-487d-b9b0-6f76cedbb198", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "<account-id>", "eventCategory": "Management" }
O exemplo a seguir mostra uma entrada de CloudTrail registro que demonstra a TagResource ação.
{ "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "accessKeyId": "<access-key-id>", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "userName": "<user-name>" }, "webIdFederationData": {}, "attributes": { "creationDate": "2023-03-08T22:42:15Z", "mfaAuthenticated": "false" } } }, "eventTime": "2023-03-08T23:06:04Z", "eventSource": "wickr.amazonaws.com", "eventName": "TagResource", "awsRegion": "us-east-1", "sourceIPAddress": "<ip-address>", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36", "requestParameters": { "resource-arn": "<arn>", "tags": { "some-existing-key-3": "value 1" } }, "responseElements": null, "requestID": "4ff210e1-f69c-4058-8ac3-633fed546983", "eventID": "26147035-8130-4841-b908-4537845fac6a", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "<account-id>", "eventCategory": "Management" }
O exemplo a seguir mostra uma entrada de CloudTrail registro que demonstra a ListTagsForResource ação.
{ "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "<principal-id>", "arn": "<arn>", "accountId": "<account-id>", "accessKeyId": "<access-key-id>", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "<access-key-id>", "arn": "<arn>", "accountId": "<account-id>", "userName": "<user-name>" }, "webIdFederationData": {}, "attributes": { "creationDate": "2023-03-08T18:50:37Z", "mfaAuthenticated": "false" } } }, "eventTime": "2023-03-08T18:50:37Z", "eventSource": "wickr.amazonaws.com", "eventName": "ListTagsForResource", "awsRegion": "us-east-1", "sourceIPAddress": "<ip-address>", "userAgent": "axios/0.27.2", "errorCode": "AccessDenied", "requestParameters": { "resource-arn": "<arn>" }, "responseElements": { "message": "User:<arn>is not authorized to perform: wickr:ListTagsForResource on resource:<arn>with an explicit deny" }, "requestID": "c7488490-a987-4ca2-a686-b29d06db89ed", "eventID": "5699d5de-3c69-4fe8-b353-8ae62f249187", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "<account-id>", "eventCategory": "Management" }
