本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。
# 监控 Compute Optimizer 自动化
监控是维护 Compute Optimizer Automizer Automatizer Automatizer 和其他 AWS 解决方案的可靠性、可用性和性能的重要组成部分。 AWS 提供了以下监控工具，用于监视 Compute Optimizer Automizer 自动化，报告何时出现问题，并在适当时自动采取操作：
+ *AWS CloudTrail* 捕获由您的 AWS 账户 或代表该账户发出的 API 调用和相关事件，并将日志文件传输到您指定的 Amazon S3 桶。您可以标识哪些用户和账户调用了 AWS、发出调用的源 IP 地址以及调用的发生时间。有关更多信息，请参阅 [AWS CloudTrail 《用户指南》](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/)。
*Amazon EventBridge* 是一项无服务器事件总线服务，可以轻松地将您的应用程序与来自各种来源的数据连接起来。 EventBridge 提供来自您自己的应用程序、 Software-as-a-Service (SaaS) 应用程序和 AWS 服务的实时数据流，并将这些数据路由到 Lambda 等目标。这使您能够监控服务中发生的事件，并构建事件驱动的架构。有关更多信息，请参阅 [Amazon EventBridge 用户指南](https://docs.aws.amazon.com/eventbridge/latest/userguide/)。
# 使用记录 AWS Compute Optimizer 自动化 API 调用 AWS CloudTrail
AWS Compute Optimizer Automatizer Automation 与[AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html)一项服务集成，该服务提供用户、角色或角色所执行操作的记录。 AWS 服务 CloudTrail 将 Compute Optimizer 自动化的所有 API 调用捕获为事件。捕获的调用包括来自 Compute Optimizer Automizer 自动化控制台的调用和对 Compute Optimizer Automizer Automizer Autom 使用收集的信息 CloudTrail，您可以确定向 Compute Optimizer Automizer Automatizer Automation 发出的请求、发出请求的 IP 地址、发出请求的时间以及其他详细信息。
每个事件或日志条目都包含有关生成请求的人员信息。身份信息有助于您确定以下内容：
+ 请求是使用根用户凭证还是用户凭证发出的。
+ 请求是否代表 IAM Identity Center 用户发出。
+ 请求是使用角色还是联合用户的临时安全凭证发出的。
+ 请求是否由其他 AWS 服务发出。
CloudTrail 在您创建账户 AWS 账户 时在您的账户中处于活动状态，并且您自动可以访问 CloudTrail **活动历史记录**。 CloudTrail **事件历史记录**提供了过去 90 天中记录的管理事件的可查看、可搜索、可下载且不可变的记录。 AWS 区域有关更多信息，请参阅《*AWS CloudTrail 用户指南》*中的 “[使用 CloudTrail 事件历史记录](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html)”。查看**活动历史记录**不 CloudTrail收取任何费用。
要持续记录 AWS 账户 过去 90 天内的事件，请创建跟踪或 [CloudTrailLake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) 事件数据存储。
**CloudTrail 步道**
*跟踪*允许 CloudTrail 将日志文件传输到 Amazon S3 存储桶。使用创建的所有跟踪 AWS 管理控制台 都是多区域的。您可以通过使用 AWS CLI创建单区域或多区域跟踪。建议创建多区域跟踪，因为您可以捕获账户 AWS 区域 中的所有活动。如果您创建单区域跟踪，则只能查看跟踪的 AWS 区域中记录的事件。有关跟踪的更多信息，请参阅《AWS CloudTrail 用户指南》**中的[为您的 AWS 账户创建跟踪](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trail.html)和[为组织创建跟踪](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html)。
通过创建跟踪，您可以免费将正在进行的管理事件的一份副本传送到您的 Amazon S3 存储桶，但会收取 Amazon S3 存储费用。 CloudTrail 有关 CloudTrail 定价的更多信息，请参阅[AWS CloudTrail 定价](https://aws.amazon.com/cloudtrail/pricing/)。有关 Amazon S3 定价的信息，请参阅 [Amazon S3 定价](https://aws.amazon.com/s3/pricing/)。
**CloudTrail 湖泊事件数据存储**
CloudTrail L@@ *ak* e 允许你对自己的事件运行基于 SQL 的查询。 CloudTrail Lake 将基于行的 JSON 格式的现有事件转换为 [Apache ORC](https://orc.apache.org/) 格式。ORC 是一种针对快速检索数据进行优化的列式存储格式。事件将被聚合到*事件数据存储*中，它是基于您通过应用[高级事件选择器](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-concepts.html#adv-event-selectors)选择的条件的不可变的事件集合。应用于事件数据存储的选择器用于控制哪些事件持续存在并可供您查询。有关 CloudTrail Lake 的更多信息，请参阅《*AWS CloudTrail 用户指南》*中的 “[使用 AWS CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html)”。
CloudTrail 湖泊事件数据存储和查询会产生费用。创建事件数据存储时，您可以选择要用于事件数据存储的[定价选项](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html#cloudtrail-lake-manage-costs-pricing-option)。定价选项决定了摄取和存储事件的成本，以及事件数据存储的默认和最长保留期。有关 CloudTrail 定价的更多信息，请参阅[AWS CloudTrail 定价](https://aws.amazon.com/cloudtrail/pricing/)。
## 中的 Compute Optimizer 自动化管理事件 CloudTrail
[管理事件](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events)提供有关对中的资源执行的管理操作的信息 AWS 账户。这些也称为控制面板操作。默认情况下， CloudTrail 记录管理事件。
AWS Compute Optimizer Automizer Automizer Automizer Automizer Automizer 的控制平面操作作为 有关 AWS Compute Optimizer Automizer Automizer Automizer Automizer 控制平面操作的列表，请参阅 Compute Optimizer Autom [AWS izer 自动化 API 参考](https://docs.aws.amazon.com/Provide API url)。 CloudTrail
## Compute Optimizer 自动化事件示例
事件代表来自任何来源的单个请求，包括有关所请求的 API 操作、操作的日期和时间、请求参数等的信息。 CloudTrail 日志文件不是公共 API 调用的有序堆栈跟踪，因此事件不会按任何特定顺序出现。
以下示例显示了一个演示该`ThrottlingException`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T20:23:42Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:50:12Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetEnrollmentConfiguration",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "2f3a4012-f005-4d83-9042-1639a80c54ce",
"eventID": "29ea5225-2dd6-486f-9bfe-caf7a81c3bab",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"errorCode": "ThrottlingException",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`AccessDenied`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/ReadOnly/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/ReadOnly",
"accountId": "111122223333",
"userName": "ReadOnly"
},
"attributes": {
"creationDate": "2025-11-06T19:48:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:50:12Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetEnrollmentConfiguration",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "3f4a5013-f106-4e84-9143-1740b91d55df",
"eventID": "30fb6336-3ee7-597g-0cgf-dbg8b92d4cbc",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"errorCode": "AccessDenied",
"errorMessage": "User: arn:aws:sts::111122223333:assumed-role/ReadOnly/john-doe is not authorized to perform: aco-automation:GetEnrollmentConfiguration because no identity-based policy allows the aco-automation:GetEnrollmentConfiguration action",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`NetworkEvent`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-07T04:23:51Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:48Z",
"eventSource": "aco-automation.amazonaws.com",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "4g5b6024-g217-5f95-0254-2851c02e66eg",
"eventID": "41gc7447-4ff8-608h-1dgh-ech9c03e5dcd",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"eventName": "GetEnrollmentConfiguration",
"requestParameters": null,
"responseElements": null,
"sharedEventID": "c50cba87-2fb0-4458-b9fb-3c5e0f077718",
"vpcEndpointId": "AWS Internal",
"vpcEndpointAccountId": "AWS Internal",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`GetEnrollmentConfiguration`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROASVBPKTAKQR6L32DI4",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:48Z",
"eventSource": "aco-automation.amazonaws.com",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "5h6c7135-h328-6ga6-1365-3962d13f77fh",
"eventID": "52hd8558-5gg9-719i-2ehi-fdi0d14f6ede",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"eventName": "GetEnrollmentConfiguration",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListAccounts`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "AuthenticatedComputeOptimizerRole"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:48Z",
"eventSource": "aco-automation.amazonaws.com",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "6i7d8246-i439-7hb7-2476-4073e24g88gi",
"eventID": "63ie9669-6hh0-820j-3fij-gej1e25g7fef",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"eventName": "ListAccounts",
"requestParameters": {
"maxResults": 50
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`GetAutomationRule`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "abcdef01234567890;",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:24:01Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetAutomationRule",
"awsRegion": "us-east-1",
"eventTime": "2025-11-06T04:24:01Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "7j8e9357-j540-8ic8-3587-5184f35h99hj",
"eventID": "74jf0770-7ii1-931k-4gjk-hfk2f36h8gfg",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleArn": "arn:aws:compute-optimizer::123456789012:automation-rule/123AbcdEfGHi1jkL"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListAutomationRules`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:21:59Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationRules",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "8k9f0468-k651-9jd9-4698-6295g46i00ik",
"eventID": "85kg1881-8jj2-042l-5hkl-igl3g47i9hgh",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListTagsForResource`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:33:00Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListTagsForResource",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "9l0g1579-l762-0ke0-5709-7306h57j11jl",
"eventID": "96lh2992-9kk3-153m-6ilm-jhm4h58j0ihi",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"resourceArn": "arn:aws:compute-optimizer::111122223333:automation-rule/035Pcy46SStQHe0A"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListAutomationRulePreview`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T19:31:22Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:31:28Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationRulePreview",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "0m1h2680-m873-1lf1-6810-8417i68k22km",
"eventID": "07mi3003-0ll4-264n-7jmn-kin5i69k1jij",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true, Note: Please be mindful when interacting with displayed links.
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleType": "OrganizationRule",
"organizationScope": {
"accountIds": [
"535045952558"
]
},
"recommendedActionTypes": [
"UpgradeEbsVolumeType",
"SnapshotAndDeleteUnattachedEbsVolume"
],
"criteria": {
"region": [{
"comparison": "StringEquals",
"values": [
"us-east-1",
"us-west-2"
]
}],
"resourceArn": [{
"comparison": "StringLike",
"values": [
"vol-"
]
}]
},
"maxResults": 100
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListAutomationRulePreviewSummaries`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T19:14:49Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:21:52Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationRulePreviewSummaries",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "1n2i3791-n984-2mg2-7921-9528j79l33ln",
"eventID": "18nj4114-1mm5-375o-8kon-ljo6j70l2kjk",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleType": "AccountRule",
"recommendedActionTypes": [
"SnapshotAndDeleteUnattachedEbsVolume"
]
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListRecommendedActions`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:27:20Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListRecommendedActions",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "2o3j4802-o095-3nh3-8032-0639k80m44mo",
"eventID": "29ok5225-2nn6-486p-9lop-mqp7k81m3lkl",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListRecommendedActionSummaries`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:31:59Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListRecommendedActionSummaries",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "3p4k5913-p106-4oi4-9143-1740l91n55np",
"eventID": "30pl6336-3oo7-597q-0dqp-nrq8l92n4mlm",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`GetAutomationEvent`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:25:20Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "GetAutomationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "4q5l6024-q217-5pj5-0254-2851m02o66oq",
"eventID": "41qm7447-4pp8-608r-1eqr-srr9m03o5nmn",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"eventId": "a12cb3d4e5f67g0h"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListAutomationEvents`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:24:32Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationEvents",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "5r6m7135-r328-6qk6-1365-3962n13p77pr",
"eventID": "52rn8558-5qq9-719s-2frs-tss0n14p6ono",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListAutomationEventSteps`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:28:10Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationEventSteps",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "6s7n8246-s439-7rl7-2476-4073o24q88qs",
"eventID": "63so9669-6rr0-820t-3gst-utt1o25q7pop",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"eventId": "a12cb3d4e5f67g0h"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`ListAutomationEventSummaries`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:31:03Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "ListAutomationEventSummaries",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "7t8o9357-t540-8sm8-3587-5184p35r99rt",
"eventID": "74tp0770-7ss1-931u-4htu-vuv2p36r8qpq",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": null,
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`UpdateEnrollmentConfiguration`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "USER NAME"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:46Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "UpdateEnrollmentConfiguration",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "8u9p0468-u651-9tn9-4698-6295q46s00su",
"eventID": "85uq1881-8tt2-042v-5iuv-wvw3q47s9rqr",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"status": "Active",
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"status": "Active",
"lastUpdatedTimestamp": "Nov 5, 2025, 8:23:46 PM"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`AssociateAccounts`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "AuthenticatedComputeOptimizerRole"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:45Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "AssociateAccounts",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "9v0q1579-v762-0uo0-5709-7306r57t11tv",
"eventID": "96vr2992-9uu3-153w-6jvw-xwx4r58t0srs",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"errorCode": "InvalidParameterValueException",
"errorMessage": "The management account or the delegated administrator doesn't have access to this member account.",
"requestParameters": {
"accountIds": [
"123456789012"
],
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`DisassociateAccounts`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "EXAMPLEAIZ5FYRFP3POCC:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/AuthenticatedComputeOptimizerRole/MettleCanary",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/AuthenticatedComputeOptimizerRole",
"accountId": "111122223333",
"userName": "AuthenticatedComputeOptimizerRole"
},
"attributes": {
"creationDate": "2025-11-05T20:23:45Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-05T20:23:47Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "DisassociateAccounts",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "0w1r2680-w873-1vp1-6810-8417s68u22uw",
"eventID": "07ws3003-0vv4-264x-7kwx-yxy5s69u1tst",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"accountIds": [
"123456789012"
],
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"accountIds": [
"123456789012"
]
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`CreateAutomationRule`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/*****************",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:20:00Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "CreateAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "1x2s3791-x984-2wq2-7921-9528t79v33vx",
"eventID": "18xt4114-1ww5-375y-8lxy-zyz6t70v2utu",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleName": "TestRule",
"ruleType": "AccountRule",
"recommendedActionTypes": [
"SnapshotAndDeleteUnattachedEbsVolume"
],
"schedule": {
"scheduleExpression": "cron(0 2 * * ? *)",
"scheduleExpressionTimezone": "UTC",
"executionWindowInMinutes": 60
},
"status": "Active",
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"ruleArn": "arn:aws:compute-optimizer::123456789012:automation-rule/123AbcdEfGHi1jkL",
"ruleId": "123AbcdEfGHi1jkL",
"name": "SourabTestRule",
"ruleType": "AccountRule",
"ruleRevision": 1,
"priority": "1E-30",
"recommendedActionTypes": [
"SnapshotAndDeleteUnattachedEbsVolume"
],
"criteria": {
"region": [{
"comparison": "StringEquals",
"values": [
"us-east-1"
]
}]
},
"clientToken": "12345abc-12ab-1234-123a-EXAMPLEeb16b"
},
"responseElements": {
"ruleArn": "arn:aws:compute-optimizer:us-east-1:111122223333:automation-rule/123AbcdEfGHi1jkL"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`DeleteAutomationRule`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:26:15Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "DeleteAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "3z4u5913-z106-4ys4-9143-1740v91x55xz",
"eventID": "30zv6336-3yy7-597a-0eza-b1b8v92x4wvw",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleArn": "arn:aws:compute-optimizer::111122223333:automation-rule/123AbcdEfGHi1jkL"
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`UpdateAutomationRule`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:22:30Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "UpdateAutomationRule",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/ComputeOptimizerAutomation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x8664 lang/java#17.0.16 md/OpenJDK64-BitServerVM#17.0.16+8-LTS md/vendor#Amazon.comInc. md/enUS md/kotlin/1.9.21-release-633 exec-env/AWSLambdajava17 m/E,N,i",
"requestID": "2y3t4802-y095-3xr3-8032-0639u80w44wy",
"eventID": "29yu5225-2xx6-486z-9myz-a0a7u81w3vuv",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"ruleArn": "arn:aws:compute-optimizer:us-east-1:123456789012:automation-rule/123AbcdEfGHi1jkL",
"status": "Active"
},
"responseElements": {
"ruleArn": "arn:aws:compute-optimizer:us-east-1:123456789012:automation-rule/123AbcdEfGHi1jkL"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLSAES128GCMSHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`TagResource`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:22:37Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "TagResource",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "6c7x8246-c439-7bv7-2476-4073y24a99ab",
"eventID": "63cy9669-6bb0-820d-3hcd-ede2y25a7bab",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"resourceArn": "arn:aws:compute-optimizer::111122223333:automation-rule/123AbcdEfGHi1jkL",
"ruleRevision": 1,
"tags": [{
"key": "test",
"value": "cloudtrail"
}]
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`UntagResource`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID"
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:33:09Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "UntagResource",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "7d8y9357-d540-8cw8-3587-5184z35b00bc",
"eventID": "74dz0770-7cc1-931e-4ide-fef3z36b8cbc",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"resourceArn": "arn:aws:compute-optimizer::111122223333:automation-rule/123AbcdEfGHi1jkL",
"ruleRevision": 2,
"tagKeys": [
"test"
]
},
"responseElements": null,
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`RollbackAutomationEvent`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T19:31:22Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T19:35:59Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "RollbackAutomationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "8e9z0468-e651-9dx9-4698-6295a46c11cd",
"eventID": "85ea1881-8dd2-042f-5jef-gfg4a47c9dcd",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"eventId": "a52cb5d6d8f24e0c",
"clientToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": {
"eventId": "a52cb5d6d8f24e0c",
"eventStatus": "ROLLBACK_READY"
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
以下示例显示了一个演示该`StartAutomationEvent`操作 CloudTrail 的事件。
```
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "abcdef01234567890;:john-doe",
"arn": "arn:aws:sts::111122223333:assumed-role/Admin/john-doe",
"accountId": "111122223333",
"accessKeyId": "ACCESS KEY ID"
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "EXAMPLEAIZ5FYRFP3POCC",
"arn": "arn:aws:iam::111122223333:role/Admin",
"accountId": "111122223333",
"userName": "Admin"
},
"attributes": {
"creationDate": "2025-11-06T04:19:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-11-06T04:27:46Z",
"eventSource": "aco-automation.amazonaws.com",
"eventName": "StartAutomationEvent",
"awsRegion": "us-east-1",
"sourceIPAddress": "100.26.200.255",
"userAgent": "canary-generated aws-sdk-java/2.35.11 md/io#sync md/http#Apache md/internal ua/2.1 api/Compute_Optimizer_Automation#2.37.x-SNAPSHOT os/Linux#5.10.244-267.968.amzn2.x86_64 lang/java#17.0.16 md/OpenJDK_64-Bit_Server_VM#17.0.16+8-LTS md/vendor#Amazon.com_Inc. md/en_US md/kotlin/1.9.21-release-633 exec-env/AWS_Lambda_java17 m/E,N,i",
"requestID": "9f0a1579-f762-0ey0-5709-7306b57d22de",
"eventID": "96fb2992-9ee3-153g-6kfg-hgh5b58d0ede",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management",
"requestParameters": {
"recommendedActionId": "aa112223333a4444"
},
"responseElements": {
"recommendedActionId": "aa112223333a4444",
"eventId": "a12cb3d4e5f67g0h",
"status": "READY"
}
},
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "aco-automation-gamma.us-east-1.amazonaws.com"
}
}
```
有关 CloudTrail 录音内容的信息，请参阅《*AWS CloudTrail 用户指南》*中的[CloudTrail录制内容](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-record-contents.html)。