本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。
# 使用记录亚马逊托管 Grafana API 调用 AWS CloudTrail
Amazon Managed Grafana [AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html)与一项服务集成，该服务提供用户、角色或角色所采取的操作的记录。 AWS 服务 CloudTrail将亚马逊托管 Grafana 的所有 API 调用捕获为事件。捕获调用中包括通过 Amazon Managed Grafana 控制台的调用和对 Amazon Managed Grafana API 操作的代码调用。
Amazon Managed Grafana 还会捕获一些使用 Grafana API 的呼叫。捕获的调用是那些更改数据的调用，例如创建、更新或删除资源的调用。有关 Amazon Managed Grafana 中支持的 Grafana API 的详细信息，请参阅 [使用 Grafana HTTP API](Using-Grafana-APIs.md)。
使用收集的信息 CloudTrail，您可以确定向 Amazon Managed Grafana 发出的请求、发出请求的 IP 地址、发出请求的时间以及其他详细信息。
每个事件或日志条目都包含有关生成请求的人员信息。身份信息有助于您确定以下内容：
+ 请求是使用根用户凭证还是用户凭证发出的。
+ 请求是否代表 IAM Identity Center 用户发出。
+ 请求是使用角色还是联合用户的临时安全凭证发出的。
+ 请求是否由其他 AWS 服务发出。
CloudTrail 在您创建账户 AWS 账户 时在您的账户中处于活动状态，并且您自动可以访问 CloudTrail **活动历史记录**。 CloudTrail **事件历史记录**提供了过去 90 天中记录的管理事件的可查看、可搜索、可下载且不可变的记录。 AWS 区域有关更多信息，请参阅《*AWS CloudTrail 用户指南》*中的 “[使用 CloudTrail 事件历史记录](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html)”。查看**活动历史记录**不 CloudTrail 收取任何费用。
要持续记录 AWS 账户 过去 90 天内的事件，请创建跟踪或 [CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) 事件数据存储。
**CloudTrail 步道**
*跟踪*允许 CloudTrail 将日志文件传输到 Amazon S3 存储桶。使用创建的所有跟踪 AWS 管理控制台 都是多区域的。您可以通过使用 AWS CLI创建单区域或多区域跟踪。建议创建多区域跟踪，因为您可以捕获账户 AWS 区域 中的所有活动。如果您创建单区域跟踪，则只能查看跟踪的 AWS 区域中记录的事件。有关跟踪的更多信息，请参阅《AWS CloudTrail 用户指南》**中的[为您的 AWS 账户创建跟踪](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trail.html)和[为组织创建跟踪](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html)。
通过创建跟踪，您可以免费将正在进行的管理事件的一份副本传送到您的 Amazon S3 存储桶，但会收取 Amazon S3 存储费用。 CloudTrail 有关 CloudTrail 定价的更多信息，请参阅[AWS CloudTrail 定价](https://aws.amazon.com/cloudtrail/pricing/)。有关 Amazon S3 定价的信息，请参阅 [Amazon S3 定价](https://aws.amazon.com/s3/pricing/)。
**CloudTrail 湖泊事件数据存储**
*CloudTrail Lak* e 允许您对自己的活动进行 SQL-based 查询。 CloudTrail Lake 将基于行的 JSON 格式的现有事件转换为 [Apache ORC](https://orc.apache.org/) 格式。ORC 是一种针对快速检索数据进行优化的列式存储格式。事件将被聚合到*事件数据存储*中，它是基于您通过应用[高级事件选择器](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-concepts.html#adv-event-selectors)选择的条件的不可变的事件集合。应用于事件数据存储的选择器用于控制哪些事件持续存在并可供您查询。有关 CloudTrail Lake 的更多信息，请参阅《*AWS CloudTrail 用户指南》*中的 “[使用 AWS CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html)”。
CloudTrail 湖泊事件数据存储和查询会产生费用。创建事件数据存储时，您可以选择要用于事件数据存储的[定价选项](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html#cloudtrail-lake-manage-costs-pricing-option)。定价选项决定了摄取和存储事件的成本，以及事件数据存储的默认和最长保留期。有关 CloudTrail 定价的更多信息，请参阅[AWS CloudTrail 定价](https://aws.amazon.com/cloudtrail/pricing/)。
## 亚马逊托管的 Grafana 管理活动 CloudTrail
[管理事件](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events)提供有关对中的资源执行的管理操作的信息 AWS 账户。这些也称为控制面板操作。默认情况下， CloudTrail 记录管理事件。
Amazon Managed Grafana 将所有 Amazon Managed Grafana 控制面板操作记录为管理事件。[有关亚马逊托管 Grafana 登录的亚马逊托管 Grafana 控制平面操作列表，请参阅亚马逊托管 Grafana AP CloudTrail I 参考。](https://docs.aws.amazon.com/grafana/latest/APIReference/Welcome.html)
## Amazon Managed Grafana 事件示例
事件代表来自任何来源的单个请求，包括有关所请求的 API 操作、操作的日期和时间、请求参数等的信息。 CloudTrail 日志文件不是公共 API 调用的有序堆栈跟踪，因此事件不会按任何特定顺序出现。
以下示例显示了 CreateWorkspace 操作的 CloudTrail 日志条目。
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "ANPAJ2UCCR6DPCEXAMPLE:sdbt-example",
"arn": "arn:aws:sts::123456789012:assumed-role/Admin/sdbt-example",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "ANPAJ2UCCR6DPCEXAMPLE",
"arn": "arn:aws:iam::123456789012:role/Admin",
"accountId": "123456789012",
"userName": "Admin"
},
"webIdFederationData": {},
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2020-11-26T20:59:21Z"
}
}
},
"eventTime": "2020-11-26T21:10:48Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "CreateWorkspace",
"awsRegion": "us-west-2",
"sourceIPAddress": "205.251.233.179",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:82.0) Gecko/20100101 Firefox/82.0",
"requestParameters": {
"permissionType": "Service Managed",
"workspaceNotificationDestinations": [
"SNS"
],
"workspaceDescription": "",
"clientToken": "12345678-abcd-1234-5678-111122223333",
"workspaceDataSources": [
"SITEWISE",
"XRAY",
"CLOUDWATCH",
"ELASTICSEARCH",
"PROMETHEUS",
"TIMESTREAM"
],
"accountAccessType": "CURRENT_ACCOUNT",
"workspaceName": "CloudTrailTest",
"workspaceRoleArn": "arn:aws:iam::123456789012:role/service-role/AmazonGrafanaServiceRole-27O5976ol"
},
"responseElements": {
"Access-Control-Expose-Headers": "x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date",
"workspace": {
"accountAccessType": "CURRENT_ACCOUNT",
"created": 1606425045.22,
"dataSources": [
"SITEWISE",
"XRAY",
"CLOUDWATCH",
"ELASTICSEARCH",
"PROMETHEUS",
"TIMESTREAM"
],
"description": "",
"grafanaVersion": "7.3.1",
"id": "g-a187c473d3",
"modified": 1606425045.22,
"name": "CloudTrailTest",
"notificationDestinations": [
"SNS"
],
"permissionType": "Service Managed",
"status": "CREATING",
"workspaceRoleArn": "arn:aws:iam::123456789012:role/service-role/AmazonGrafanaServiceRole-27O5976ol"
}
},
"requestID": "12345678-5533-4e10-b486-e9c7b219f2fd",
"eventID": "12345678-2710-4359-ad90-b902dbfb606b",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "123456789012"
}
```
以下示例显示了 UpdateWorkspaceAuthentication操作的 CloudTrail 日志条目。
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAU2UJBF3NRO35YZ3GV:CODETEST_Series_GrafanaApiTestHydraCanary12-o6aeXqaXS_1090259374",
"arn": "arn:aws:sts::332073610971:assumed-role/HydraInvocationRole-4912743f1277b7c3c67cb29518f8bc413ae/CODETEST_Series_GrafanaApiTestHydraCanary12-o6aeXqaXS_1090259374",
"accountId": "111122223333",
"accessKeyId": "AIDACKCEVSQ6C2EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAU2UJBF3NRO35YZ3GV",
"arn": "arn:aws:iam::111122223333:role/HydraInvocationRole-4912743f1277b7c3c67cb29518f8bc413ae",
"accountId": "332073610971",
"userName": "TestInvocationRole-4912743f1277b7c3c67cb29518f8bc413ae"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2021-08-04T20:50:24Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2021-08-04T21:29:25Z",
"eventSource": "gamma-grafana.amazonaws.com",
"eventName": "UpdateWorkspaceAuthentication",
"awsRegion": "us-west-2",
"sourceIPAddress": "34.215.72.249",
"userAgent": "aws-internal/3 aws-sdk-java/1.11.1030 Linux/4.14.231-180.360.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/11.0.11+9-LTS java/11.0.11 vendor/Amazon.com_Inc. cfg/retry-mode/legacy exec-env/AWS_Lambda_java11",
"requestParameters": {
"authenticationProviders": [
"AWS_SSO",
"SAML"
],
"samlConfiguration": {
"idpMetadata": {
"url": "https://portal.sso.us-east-1.amazonaws.com/saml/metadata/NjMwMDg2NDc4OTA3X2lucy1jY2E2ZGU3ZDlmYjdiM2Vh"
}
},
"workspaceId": "g-84ea23c1b4"
},
"responseElements": {
"authentication": {
"awsSso": {
"ssoClientId": "gAROcWGs9-LoqCMIQ56XyEXAMPLE"
},
"providers": [
"AWS_SSO",
"SAML"
],
"saml": {
"configuration": {
"idpMetadata": {
"url": "https://portal.sso.us-east-1.amazonaws.com/saml/metadata/NjMwMDg2NDc4OTA3X2lucy1jY2E2ZGU3ZDlmYjdiM2Vh"
},
"loginValidityDuration": 60
},
"status": "CONFIGURED"
}
}
},
"requestID": "96adb1de-7fa5-487e-b6c6-6b0d4495cb71",
"eventID": "406bc825-bc52-475c-9c91-4c0d8a07c1fa",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}
```
有关 CloudTrail 录音内容的信息，请参阅《*AWS CloudTrail 用户指南》*中的[CloudTrail 录制内容](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-record-contents.html)。
## Grafana API 事件示例
Amazon Managed Grafana 还会记录一些 Grafana API 调用。 CloudTrail捕获的调用是那些更改数据的调用，例如创建、更新或删除资源的调用。有关 Amazon Managed Grafana 中支持的 Grafana API 的详细信息，请参阅 [使用 Grafana HTTP API](Using-Grafana-APIs.md)。
**用户使用 AWS IAM Identity Center登录 Amazon Managed Grafana 工作区**
```
{
"Records": [
{
"eventVersion": "1.08",
"userIdentity": {
"type": "SAMLUser",
"userName": "johndoe"
},
"eventTime": "2021-07-09T02:31:59Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "login-auth.sso",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36",
"requestParameters": null,
"responseElements": null,
"eventID": "176bf326-0302-4190-8dbf-dfdf481d8198",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:31:59.045984031Z",
"user": {
"userId": 1,
"orgId": 1,
"name": "johndoe",
"isAnonymous": false
},
"action": "login-auth.sso",
"requestUri": "",
"request": {
"query": {
"code": [
"eyJraWQiOiJrZXktMTU2Njk2ODEyMSIsImFsZyI6IkhTMzg0In0.eyJwbGFpbnRleHQiOiJZUzEwYWtaWHpBZUowTDlQcW5ROGFmZUw2YUZMRklPWUtkX2RRMmhmUUFFIiwiZXhwIjoxNjI1Nzk4MjE4LCJ0eXBlIjoiYXV0aENvZGUifQ.F6MCLvokeXFv1zEwaSg66wdfnNh0dEnLIKBZ4c1dhfNHX_XQywkSq3aqqUg4CsB7"
],
"state": [
"QUFBQURtdGxlUzB4TlRZNE9UVTFOekkyM2RUWUFUaHZHYXcyOU9ULUVaWHhNUXAwX184N25RVGVWMmd0enFpVE1iWlRPV0M0X09HaDZscjcweDZNbUE3blRjamNISk9RQ2hCUktrY093ZW52aDNWZ2R5UXVndnc4R2g0RkxsamkwMGNvektWbS1KYWRVYnZ0X3AtSU5JRzIxZjFvcWgxN19vM0lPaW9vY1FBVlhLVmEzRE5CRjQxTU1fM3VmYzNWdW53aGZ0QVdFWHBUWTNWTkxrcllKQ3I1akFOUmV1Zlh4Y3ZjQi1XOEVMa0RPUFBqM094VGgta2hHdVFxSDB4YXZKMng"
]
}
},
"result": {
"statusType": "failure"
},
"ipAddress": "192.0.2.0,198.51.100.0",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE",
"extUserInfo": "{\"OAuthToken\":null,\"AuthModule\":\"auth.sso\",\"AuthId\":\"92670be4c1-e524608b-82f2-452d-a707-161c1e5f4706\",\"UserId\":0,\"Email\":\"\",\"Login\":\"johndoe\",\"Name\":\"johndoe\",\"Groups\":null,\"OrgRoles\":{\"1\":\"Admin\"},\"IsGrafanaAdmin\":false,\"IsDisabled\":false}"
}
}
}
]
}
```
**Grafana API POST//keys api/auth**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:32Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "157bbf19-6ba4-4704-bc3b-d3e334b3a2b8",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:32.419795511Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "api-key"
}
],
"requestUri": "",
"request": {
"body": "{\"name\":\"keyname\",\"role\":\"Admin\",\"secondsToLive\":60}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API 删除//keys/: id api/auth**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:33Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "delete",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "df1aafb3-28c6-4836-a64b-4d34538edc51",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:33.045041594Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "delete",
"resources": [
{
"ID": 0,
"type": "api-key"
}
],
"requestUri": "",
"request": {
"params": {
":id": "24"
}
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST//: api/alerts id/pause**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:40Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "pause",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "d533a7ba-f193-45ac-a88c-75ed0594509b",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:40.261226856Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "pause",
"resources": [
{
"ID": 0,
"type": "alert"
}
],
"requestUri": "",
"request": {
"params": {
":alertId": "1"
},
"body": "{\"paused\":true}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana POST//test api/alerts**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:39Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "test",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,10.0.42.208",
"userAgent": "python-requests/2.24.0",
"errorCode": "400",
"errorMessage": "The dashboard needs to be saved at least once before you can test an alert rule",
"requestParameters": null,
"responseElements": null,
"eventID": "7094644d-8230-4774-a092-8a128eb6dec9",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:39.622607860Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "test",
"resources": [
{
"ID": 0,
"type": "panel"
}
],
"requestUri": "",
"request": {},
"result": {
"statusType": "failure",
"statusCode": "400",
"failureMessage": "The dashboard needs to be saved at least once before you test an alert rule"
},
"ipAddress": "192.0.2.0, 10.0.42.208",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST/-notifications api/alert**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:40Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.0",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "1ce099b3-c427-4338-9f42-d38d1ef64efe",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:40.888295790Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "alert-notification"
}
],
"requestUri": "",
"request": {
"body": "{\"name\":\"alert notification name\",\"type\":\"Slack\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.0",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API PUT /-/: uid api/alert notifications/uid**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:42Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "update",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "cebfeb38-5007-495c-bd29-c8077797acac",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:42.792652648Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "update",
"resources": [
{
"ID": 0,
"type": "alert-notification"
}
],
"requestUri": "",
"request": {
"params": {
":uid": "WvDWDSinz"
},
"body": "{\"name\":\"DIFFERENT alert notification name\",\"type\":\"AWS SNS\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.3",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST/api/annotations**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:45Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "13bf3bef-966c-4913-a760-ade365a4a08f",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:45.394513179Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "annotation"
}
],
"requestUri": "",
"request": {
"body": "{\"dashboardId\":36,\"panelId\":2,\"tags\":[\"tag1\",\"tag2\"],\"what\":\"Event Name\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API 删除//uid/: uid api/dashboards**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:17:09Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "delete",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.7",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "d6ad9134-5fbc-403c-a76d-4ed9a81065b6",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:17:09.200112003Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "delete",
"resources": [
{
"ID": 0,
"type": "dashboard"
}
],
"requestUri": "",
"request": {
"params": {
":uid": "GLzWvIi7z"
}
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.7",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API PUT//: dataSourceID api/datasources**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:36Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "update",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,10.0.108.94",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "92877483-bdf6-44f5-803e-1ac8ad997113",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:36.918660585Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "update",
"resources": [
{
"ID": 0,
"type": "datasource"
}
],
"requestUri": "",
"request": {
"params": {
":id": "108"
},
"body": "{\"access\":\"proxy\",\"basicAuth\":false,\"name\":\"test_amp_datasource_NEW_name\",\"type\":\"Amazon Managed Prometheus\",\"url\":\"http://amp.amazonaws.com\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,10.0.108.94",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API 删除api/teams//:/: groupID teamId/groups**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:17:07Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "delete",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "b41d3967-daab-44d1-994a-a437556add82",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:17:07.296142539Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "delete",
"resources": [
{
"ID": 0,
"type": "team"
}
],
"requestUri": "",
"request": {
"params": {
":groupId": "cn=editors,ou=groups,dc=grafana,dc=org",
":teamId": "35"
}
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,198.51.100.2",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API PUT//: uid api/folders**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:16:56Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "update",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"errorCode": "412",
"errorMessage": "the folder has been changed by someone else",
"requestParameters": null,
"responseElements": null,
"eventID": "414c98c8-aa53-45e4-940d-bea55716eaf6",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:16:56.382646826Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "update",
"resources": [
{
"ID": 0,
"type": "folder"
}
],
"requestUri": "",
"request": {
"params": {
":uid": "lnsZvSi7z"
},
"body": "{\"title\":\"NEW Folder Name\"}"
},
"result": {
"statusType": "failure",
"statusCode": "412",
"failureMessage": "the folder has been changed by someone else"
},
"ipAddress": "192.0.2.0,198.51.100.1",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```
**Grafana API POST/api/teams**
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "Unknown",
"userName": "api_key"
},
"eventTime": "2021-07-09T02:17:02Z",
"eventSource": "grafana.amazonaws.com",
"eventName": "create",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0,10.0.40.206",
"userAgent": "python-requests/2.24.0",
"errorCode": "200",
"requestParameters": null,
"responseElements": null,
"eventID": "8d40bd79-76a8-490c-b7bb-74205253b707",
"readOnly": false,
"eventType": "AwsServiceEvent",
"managementEvent": true,
"eventCategory": "Management",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"timestamp": "2021-07-09T02:17:02.845022379Z",
"user": {
"orgId": 1,
"orgRole": "Admin",
"name": "api_key",
"apiKeyId": "23",
"isAnonymous": false
},
"action": "create",
"resources": [
{
"ID": 0,
"type": "team"
}
],
"requestUri": "",
"request": {
"body": "{\"name\":\"TeamName\"}"
},
"result": {
"statusType": "success",
"statusCode": "200"
},
"ipAddress": "192.0.2.0,10.0.40.206",
"userAgent": "python-requests/2.24.0",
"grafanaVersion": "7.5.7",
"additionalData": {
"GiraffeCustomerAccount": "111122223333",
"GiraffeWorkspaceId": "g-123EXAMPLE"
}
}
}
```