Skip to content

Instantly share code, notes, and snippets.

@jmelloy

jmelloy/cloudtrail.json

Created September 20, 2017 21:55
Show Gist options
  • Save jmelloy/61bc032a2ccbf2fd900a2c4c1e445a5f to your computer and use it in GitHub Desktop.
Save jmelloy/61bc032a2ccbf2fd900a2c4c1e445a5f to your computer and use it in GitHub Desktop.
Download ZIP
Raw
cloudtrail.json
{
"Records": [
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:55:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeSpotInstanceRequests",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"spotInstanceRequestIdSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "68ff7fb1-67fd-4ee8-8aef-278c40b935f3",
"eventID": "b5775a7a-660e-4562-b807-35c449036725",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:55:07Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "af401505-ebf2-48ee-93b3-a7a966e3fce7",
"eventID": "961c87f9-66c2-4576-9c60-a46b99a28a64",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:09Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "52.6.110.130",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "5cb5c1e8-74aa-4cda-b026-2691c1d40b50",
"eventID": "107e04dc-c920-4c43-ba97-d70d40456efc",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJYSBN46JXB376C3CE",
"arn": "arn:aws:iam::836073662699:user/NOC",
"accountId": "836073662699",
"accessKeyId": "AKIAI3SJKEHVH27SONIQ",
"userName": "NOC"
},
"eventTime": "2017-09-19T23:55:19Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.196.194.146",
"userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "b75bfc95-3f52-476e-87c4-733360c7999c",
"eventID": "614a56b9-d322-409e-9be6-862b62d5ced8",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:09Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "52.6.110.130",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "6a7caf9a-1e06-406b-bc38-9d361afdb33c",
"eventID": "c1ff6765-16c6-423e-a2e5-d1a092104c27",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJYSBN46JXB376C3CE",
"arn": "arn:aws:iam::836073662699:user/NOC",
"accountId": "836073662699",
"accessKeyId": "AKIAI3SJKEHVH27SONIQ",
"userName": "NOC"
},
"eventTime": "2017-09-19T23:55:03Z",
"eventSource": "rds.amazonaws.com",
"eventName": "DescribeDBInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.196.194.146",
"userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
"requestParameters": null,
"responseElements": null,
"requestID": "f424313f-9d95-11e7-8a4b-ef4f4eb3f458",
"eventID": "74ad1924-2ff1-4008-a4b1-adf8d3646795",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:22Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.173.54.246",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "93c2fda7-5505-448d-b04d-e677a3601059",
"eventID": "be16be30-0e51-4104-b837-44e7d406a781",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:54:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "ceb96340-70de-4d43-88d1-de29e55c9534",
"eventID": "ef14bf3a-4420-4f78-8e71-d46671a4505a",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:54:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeSpotInstanceRequests",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"spotInstanceRequestIdSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "c83a10ee-3064-4fbe-806b-6a006a6c2ca9",
"eventID": "a8f9f220-78d5-4997-8d42-886fb6bc7a72",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.173.51.226",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "4e9ce749-43d1-46c4-b7b1-2b681e478ecb",
"eventID": "b171d28a-76e8-413d-ac40-5cccd0f220d2",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJYSBN46JXB376C3CE",
"arn": "arn:aws:iam::836073662699:user/NOC",
"accountId": "836073662699",
"accessKeyId": "AKIAI3SJKEHVH27SONIQ",
"userName": "NOC"
},
"eventTime": "2017-09-19T23:55:02Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.196.194.146",
"userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "9dffec82-e9bc-4a6a-ab58-539a98df8a84",
"eventID": "81c469f9-2a32-4f4b-9c66-b5f26d50681f",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:53:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "f6333f0f-68e1-4926-8400-6ce9066040e8",
"eventID": "2f6554dd-aef4-4af8-9a18-e966a4fd5b96",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:53:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeSpotInstanceRequests",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"spotInstanceRequestIdSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "4b869d39-e2d8-4665-ad5a-c2f1ea0db2a2",
"eventID": "dff84063-ee46-4e1a-9978-df69b816f9c9",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:43Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.172.37.251",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "e83641e9-f4b6-4de9-8961-5f9583ae2cd6",
"eventID": "1a1ca75d-2195-4d32-b002-180818fbb658",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AWSService",
"invokedBy": "ec2.amazonaws.com"
},
"eventTime": "2017-09-19T23:53:05Z",
"eventSource": "sts.amazonaws.com",
"eventName": "AssumeRole",
"awsRegion": "us-east-1",
"sourceIPAddress": "ec2.amazonaws.com",
"userAgent": "ec2.amazonaws.com",
"requestParameters": {
"roleSessionName": "i-062cbc1e856960883",
"roleArn": "arn:aws:iam::836073662699:role/DSS"
},
"responseElements": {
"credentials": {
"sessionToken": "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\\u003d",
"accessKeyId": "ASIAJAPGUEQBDWVPKOXA",
"expiration": "Sep 20, 2017 6:28:08 AM"
}
},
"requestID": "5cfb0110-6151-4f49-982a-c3fa286ccdec",
"eventID": "e450db2c-0182-4929-9e37-e5c092eb80fe",
"resources": [
{
"ARN": "arn:aws:iam::836073662699:role/DSS",
"accountId": "836073662699",
"type": "AWS::IAM::Role"
}
],
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699",
"sharedEventID": "2184adf8-6d41-40c1-9da9-caf8cb045a54"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AWSService",
"invokedBy": "ec2.amazonaws.com"
},
"eventTime": "2017-09-19T23:53:51Z",
"eventSource": "sts.amazonaws.com",
"eventName": "AssumeRole",
"awsRegion": "us-east-1",
"sourceIPAddress": "ec2.amazonaws.com",
"userAgent": "ec2.amazonaws.com",
"requestParameters": {
"roleSessionName": "i-411d17b9",
"roleArn": "arn:aws:iam::836073662699:role/DSS"
},
"responseElements": {
"credentials": {
"sessionToken": "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\\u003d",
"accessKeyId": "ASIAIMN4QIGECUHU66IA",
"expiration": "Sep 20, 2017 6:28:57 AM"
}
},
"requestID": "29d16d43-81d8-471f-ba74-e67ec92dc420",
"eventID": "15005195-e6a7-46e4-bb10-bc1481fce417",
"resources": [
{
"ARN": "arn:aws:iam::836073662699:role/DSS",
"accountId": "836073662699",
"type": "AWS::IAM::Role"
}
],
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699",
"sharedEventID": "ca08ebf7-bad3-42ae-bbb5-30546f1b9aa9"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:36Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.234.33.248",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "16348fd7-85de-4595-8a5c-06c6f11cd46e",
"eventID": "828ddfb7-dc7e-42cf-b18e-81595181dd7c",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:55:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "5f2b72f0-a83a-4ea9-8fd0-97790c0fc971",
"eventID": "88fc933c-0e9e-48c2-9fa2-b02a49e439a4",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:55:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeSpotInstanceRequests",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"spotInstanceRequestIdSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "064b8ba3-9880-43e2-8465-8f9238cdf592",
"eventID": "2f189898-d7b2-4913-bed3-c287390d0a54",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:34Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.225.59.80",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "dfe3eb41-f6f0-48ca-80a2-5f132ca729df",
"eventID": "81a338a0-b8bd-4054-931a-ce831255605f",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAILUTBF5H2JPTYJPAM",
"arn": "arn:aws:iam::836073662699:user/[email protected]",
"accountId": "836073662699",
"accessKeyId": "ASIAIN2CLER45LBXZ4HA",
"userName": "[email protected]",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T14:11:46Z"
}
},
"invokedBy": "signin.amazonaws.com"
},
"eventTime": "2017-09-19T23:53:22Z",
"eventSource": "redshift.amazonaws.com",
"eventName": "DescribeClusters",
"awsRegion": "us-east-1",
"sourceIPAddress": "24.18.192.230",
"userAgent": "signin.amazonaws.com",
"requestParameters": null,
"responseElements": {
"clusters": [
{
"nodeType": "dc1.large",
"preferredMaintenanceWindow": "fri:09:00-fri:09:30",
"clusterStatus": "available",
"clusterCreateTime": "May 4, 2015 4:18:03 PM",
"enhancedVpcRouting": false,
"endpoint": {
"port": 5439,
"address": "rightside-dw-r.cwisduywvaeb.us-east-1.redshift.amazonaws.com"
},
"masterUsername": "masteruser",
"clusterSecurityGroups": [
{
"status": "active",
"clusterSecurityGroupName": "default"
},
{
"status": "active",
"clusterSecurityGroupName": "access"
},
{
"status": "active",
"clusterSecurityGroupName": "access1"
},
{
"status": "active",
"clusterSecurityGroupName": "access2"
},
{
"status": "active",
"clusterSecurityGroupName": "proxy-vm"
}
],
"pendingModifiedValues": {},
"dBName": "rightsidedw",
"availabilityZone": "us-east-1b",
"clusterVersion": "1.0",
"encrypted": false,
"clusterPublicKey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMg6xK+JtmKZWahr0Gc+cKZKjwa1KakBndc3r/NclrFP/sfFrBI3iHbaT0Jf8nbtyFDjceI3qD++9hcDwZwkiedecIAKic4eIum953ubE3DU32+J5E826C18mSzhypHycgP6y3MeoClMhWkFJZVdffHo8k1uoY6uGyJ695n7gS/zicX7KCloItqIrLKIcz2qwkqnd7FNcDjSBGF/3cA6TX5zngps7uhZx+qTEe2onAjsvUh+QH4pHXhQL4GqTZ6rE2Y/wv0v+VFYbMm+izWsLoSs3kpdw428WCYpdGia2MA+yCJmLdiuTri4IU5Fty6lhZ9NF++4p5YjXxwpET4Rg5 Amazon-Redshift\n",
"clusterNodes": [
{
"publicIPAddress": "184.73.123.149",
"nodeRole": "LEADER",
"privateIPAddress": "10.234.108.227"
},
{
"publicIPAddress": "23.22.54.122",
"nodeRole": "COMPUTE-0",
"privateIPAddress": "10.165.108.240"
},
{
"publicIPAddress": "54.166.26.205",
"nodeRole": "COMPUTE-1",
"privateIPAddress": "10.140.157.70"
},
{
"publicIPAddress": "54.146.178.189",
"nodeRole": "COMPUTE-2",
"privateIPAddress": "10.178.204.229"
},
{
"publicIPAddress": "174.129.184.209",
"nodeRole": "COMPUTE-3",
"privateIPAddress": "10.142.202.72"
},
{
"publicIPAddress": "54.242.1.196",
"nodeRole": "COMPUTE-4",
"privateIPAddress": "10.11.169.99"
},
{
"publicIPAddress": "174.129.65.131",
"nodeRole": "COMPUTE-5",
"privateIPAddress": "10.63.62.94"
},
{
"publicIPAddress": "54.205.164.200",
"nodeRole": "COMPUTE-6",
"privateIPAddress": "10.37.164.97"
},
{
"publicIPAddress": "54.242.121.142",
"nodeRole": "COMPUTE-7",
"privateIPAddress": "10.142.206.165"
}
],
"publiclyAccessible": true,
"tags": [
{
"value": "edw-prod",
"key": "Platform"
},
{
"value": "MainRedshift",
"key": "Name"
}
],
"clusterParameterGroups": [
{
"parameterGroupName": "default.redshift-1.0",
"parameterApplyStatus": "in-sync"
}
],
"allowVersionUpgrade": true,
"clusterRevisionNumber": "1430",
"automatedSnapshotRetentionPeriod": 1,
"numberOfNodes": 8,
"vpcSecurityGroups": [],
"iamRoles": [],
"clusterIdentifier": "rightside-dw-r"
}
]
},
"requestID": "b81cc3ab-9d95-11e7-97aa-b5ef59890d94",
"eventID": "25d1c54d-d430-42b8-a09c-7a7b1e1f3370",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:15Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.195.32.205",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "53ef6e78-f758-4edb-8b68-016572c0d5bd",
"eventID": "06f5ddc4-f2b1-4f21-8f13-1cdb5fca1858",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:03Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.225.53.250",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "a8ebd697-9621-464f-872f-2111a45f8d74",
"eventID": "7d1d6c51-23fc-4d84-88d0-95c69a3c6783",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:23Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.165.160.164",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "6d879f98-ddc1-4bf3-8c7d-81a8f7435982",
"eventID": "db380f44-f573-44b3-992b-e87cd42088e0",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AWSService",
"invokedBy": "ec2.amazonaws.com"
},
"eventTime": "2017-09-19T23:53:03Z",
"eventSource": "sts.amazonaws.com",
"eventName": "AssumeRole",
"awsRegion": "us-east-1",
"sourceIPAddress": "ec2.amazonaws.com",
"userAgent": "ec2.amazonaws.com",
"requestParameters": {
"roleSessionName": "i-09d1f8453027f1f18",
"roleArn": "arn:aws:iam::836073662699:role/DSS"
},
"responseElements": {
"credentials": {
"sessionToken": "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\\u003d",
"accessKeyId": "ASIAIXK6O2YOLDHEKUSA",
"expiration": "Sep 20, 2017 6:18:39 AM"
}
},
"requestID": "a5f5e824-9900-475f-97e7-4e8f0cdfc83f",
"eventID": "ba0ac52d-63f5-4414-91f3-a8a541b89844",
"resources": [
{
"ARN": "arn:aws:iam::836073662699:role/DSS",
"accountId": "836073662699",
"type": "AWS::IAM::Role"
}
],
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699",
"sharedEventID": "360c87e6-e5e8-48a2-820d-7b54659daff4"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:05Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "107.22.20.81",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "4075631c-ed42-4ebf-a18a-7bd7435a6ada",
"eventID": "6691b876-c9c8-4c71-99ff-1aa4fc1683d7",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:54Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.197.60.114",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "e12202fb-3a11-4d1f-aed1-a6667e8bca8e",
"eventID": "8f80fef9-8006-467c-9c02-8e6f69ec9a58",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJYSBN46JXB376C3CE",
"arn": "arn:aws:iam::836073662699:user/NOC",
"accountId": "836073662699",
"accessKeyId": "AKIAI3SJKEHVH27SONIQ",
"userName": "NOC"
},
"eventTime": "2017-09-19T23:55:19Z",
"eventSource": "rds.amazonaws.com",
"eventName": "DescribeDBInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.196.194.146",
"userAgent": "Boto/2.39.0 Python/2.6.6 Linux/2.6.32-573.22.1.el6.x86_64",
"requestParameters": null,
"responseElements": null,
"requestID": "fddfa5e9-9d95-11e7-928d-25a36bd5db54",
"eventID": "3c7a201f-f6e8-421e-9d0b-272cc78345ba",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:01Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.147.184.112",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "d51fa9c8-e8b4-4336-8673-10d625be9711",
"eventID": "d12d911b-82bb-4a0f-82ca-cb694cdd40d7",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAIY55HROFL5CKSWD4Y:AutoScalingDescribeHandlerSession",
"arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AutoScalingDescribeHandlerSession",
"accountId": "836073662699",
"accessKeyId": "ASIAJINNFTCIIKVQAM4A",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T23:54:21Z"
},
"sessionIssuer": {
"type": "Role",
"principalId": "AROAIY55HROFL5CKSWD4Y",
"arn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
"accountId": "836073662699",
"userName": "config-role-us-east-1"
}
},
"invokedBy": "config.amazonaws.com"
},
"eventTime": "2017-09-19T23:54:21Z",
"eventSource": "autoscaling.amazonaws.com",
"eventName": "DescribePolicies",
"awsRegion": "us-east-1",
"sourceIPAddress": "config.amazonaws.com",
"userAgent": "config.amazonaws.com",
"requestParameters": null,
"responseElements": null,
"requestID": "db40473e-9d95-11e7-bbae-d56fdb59caf7",
"eventID": "dfaf8756-9b1b-4f25-9be0-db13a624388c",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:22Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.173.54.246",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "1c979918-b2b7-478a-a615-96797525ac46",
"eventID": "58fd0e27-1f0f-40a5-93a3-18970b9ded28",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:54:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeSpotInstanceRequests",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"spotInstanceRequestIdSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "6d7e1b88-031b-41c1-a086-4a11d5b7db9e",
"eventID": "af686bdf-6496-49c2-b5a0-236e80402565",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:54:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "a8fec77e-dc75-4e14-b9d7-2070a68534b9",
"eventID": "215cb12c-abb4-4441-901b-666d4ee728a7",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:52:52Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.147.86.214",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "006d2164-99ef-4eb6-9cab-a7be6337049f",
"eventID": "e584af7c-17c5-4f2b-8a80-350d043929e7",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:03Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.225.53.250",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "baed244d-2e81-4f9e-92e4-a5863bc40b59",
"eventID": "3a189b3a-e50a-4f9a-899d-ea6b0b8aff63",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:14Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.195.32.205",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "e6f00857-5652-4d01-a13e-97fa616c25cc",
"eventID": "d1764f69-3bf1-4eb7-8390-388ebb46df15",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:52:34Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.225.59.80",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "5e023d7a-a5c4-420c-a1bf-e00e825412b4",
"eventID": "dd79d267-364c-4b65-a15e-b74d3dc044a7",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:53Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.147.86.214",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "8dc66694-42d6-4a7e-8361-2ad5923a3ad7",
"eventID": "f419373c-1657-426e-bb1f-c6f2b4f45efa",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:56Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.199.66.140",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "4be338dd-431c-4e87-8ab0-af9faa2473bd",
"eventID": "955ab27b-5367-4e0b-b279-a7af3f148dc3",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:06Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "52.6.147.236",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "f69a476f-96b6-477d-8c44-6ac095152665",
"eventID": "816305aa-2654-4efc-9856-06b4c5feb6ad",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAILUTBF5H2JPTYJPAM",
"arn": "arn:aws:iam::836073662699:user/[email protected]",
"accountId": "836073662699",
"accessKeyId": "ASIAIN2CLER45LBXZ4HA",
"userName": "[email protected]",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T14:11:46Z"
}
},
"invokedBy": "signin.amazonaws.com"
},
"eventTime": "2017-09-19T23:54:22Z",
"eventSource": "redshift.amazonaws.com",
"eventName": "DescribeClusters",
"awsRegion": "us-east-1",
"sourceIPAddress": "24.18.192.230",
"userAgent": "signin.amazonaws.com",
"requestParameters": null,
"responseElements": {
"clusters": [
{
"nodeType": "dc1.large",
"preferredMaintenanceWindow": "fri:09:00-fri:09:30",
"clusterStatus": "available",
"clusterCreateTime": "May 4, 2015 4:18:03 PM",
"enhancedVpcRouting": false,
"endpoint": {
"port": 5439,
"address": "rightside-dw-r.cwisduywvaeb.us-east-1.redshift.amazonaws.com"
},
"masterUsername": "masteruser",
"clusterSecurityGroups": [
{
"status": "active",
"clusterSecurityGroupName": "default"
},
{
"status": "active",
"clusterSecurityGroupName": "access"
},
{
"status": "active",
"clusterSecurityGroupName": "access1"
},
{
"status": "active",
"clusterSecurityGroupName": "access2"
},
{
"status": "active",
"clusterSecurityGroupName": "proxy-vm"
}
],
"pendingModifiedValues": {},
"dBName": "rightsidedw",
"availabilityZone": "us-east-1b",
"clusterVersion": "1.0",
"encrypted": false,
"clusterPublicKey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMg6xK+JtmKZWahr0Gc+cKZKjwa1KakBndc3r/NclrFP/sfFrBI3iHbaT0Jf8nbtyFDjceI3qD++9hcDwZwkiedecIAKic4eIum953ubE3DU32+J5E826C18mSzhypHycgP6y3MeoClMhWkFJZVdffHo8k1uoY6uGyJ695n7gS/zicX7KCloItqIrLKIcz2qwkqnd7FNcDjSBGF/3cA6TX5zngps7uhZx+qTEe2onAjsvUh+QH4pHXhQL4GqTZ6rE2Y/wv0v+VFYbMm+izWsLoSs3kpdw428WCYpdGia2MA+yCJmLdiuTri4IU5Fty6lhZ9NF++4p5YjXxwpET4Rg5 Amazon-Redshift\n",
"clusterNodes": [
{
"publicIPAddress": "184.73.123.149",
"nodeRole": "LEADER",
"privateIPAddress": "10.234.108.227"
},
{
"publicIPAddress": "23.22.54.122",
"nodeRole": "COMPUTE-0",
"privateIPAddress": "10.165.108.240"
},
{
"publicIPAddress": "54.166.26.205",
"nodeRole": "COMPUTE-1",
"privateIPAddress": "10.140.157.70"
},
{
"publicIPAddress": "54.146.178.189",
"nodeRole": "COMPUTE-2",
"privateIPAddress": "10.178.204.229"
},
{
"publicIPAddress": "174.129.184.209",
"nodeRole": "COMPUTE-3",
"privateIPAddress": "10.142.202.72"
},
{
"publicIPAddress": "54.242.1.196",
"nodeRole": "COMPUTE-4",
"privateIPAddress": "10.11.169.99"
},
{
"publicIPAddress": "174.129.65.131",
"nodeRole": "COMPUTE-5",
"privateIPAddress": "10.63.62.94"
},
{
"publicIPAddress": "54.205.164.200",
"nodeRole": "COMPUTE-6",
"privateIPAddress": "10.37.164.97"
},
{
"publicIPAddress": "54.242.121.142",
"nodeRole": "COMPUTE-7",
"privateIPAddress": "10.142.206.165"
}
],
"publiclyAccessible": true,
"tags": [
{
"value": "edw-prod",
"key": "Platform"
},
{
"value": "MainRedshift",
"key": "Name"
}
],
"clusterParameterGroups": [
{
"parameterGroupName": "default.redshift-1.0",
"parameterApplyStatus": "in-sync"
}
],
"allowVersionUpgrade": true,
"clusterRevisionNumber": "1430",
"automatedSnapshotRetentionPeriod": 1,
"numberOfNodes": 8,
"vpcSecurityGroups": [],
"iamRoles": [],
"clusterIdentifier": "rightside-dw-r"
}
]
},
"requestID": "dbec1701-9d95-11e7-9cda-97adce348902",
"eventID": "b79dccfb-eaf4-41ad-8824-92bd4c624f37",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAILUTBF5H2JPTYJPAM",
"arn": "arn:aws:iam::836073662699:user/[email protected]",
"accountId": "836073662699",
"accessKeyId": "ASIAIN2CLER45LBXZ4HA",
"userName": "[email protected]",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T14:11:46Z"
}
},
"invokedBy": "signin.amazonaws.com"
},
"eventTime": "2017-09-19T23:54:20Z",
"eventSource": "redshift.amazonaws.com",
"eventName": "DescribeClusterSecurityGroups",
"awsRegion": "us-east-1",
"sourceIPAddress": "24.18.192.230",
"userAgent": "signin.amazonaws.com",
"requestParameters": null,
"responseElements": {
"clusterSecurityGroups": [
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "76.178.88.240/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.175.102.28/32",
"tags": [
{
"value": "looking_glass",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "70.112.13.35/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "72.179.22.90/32",
"tags": [
{
"value": "Scott Ryder Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "50.34.162.34/32",
"tags": [
{
"value": "Kevin Fink Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "76.178.93.38/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.0.99.159/32",
"tags": [
{
"value": "looking_glass_stg",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "98.203.243.147/32",
"tags": [
{
"value": "Drew MacPherson Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "52.0.74.74/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "67.79.8.126/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.5.227.171/32",
"tags": [
{
"value": "DSS Dev1",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "50.170.31.147/32",
"tags": [
{
"value": "Carolyn at home",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "173.160.205.246/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.152.32.20/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "149.11.36.178/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.130.177/32",
"tags": [
{
"value": "Kelvin Osborne Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.152.143.252/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "73.157.1.96/32",
"tags": [
{
"value": "Drew MacPherson Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.152.133.246/32",
"tags": [],
"status": "authorized"
}
],
"description": "Test to see if I can add more access rules",
"tags": [],
"clusterSecurityGroupName": "access"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "198.134.93.234/32",
"tags": [
{
"value": "Nate Gillespie",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "174.16.221.227/32",
"tags": [
{
"value": "Nate Gillespie",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.89/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.12/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.72/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.130/32",
"tags": [
{
"value": "Kirkland VPN",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "52.7.30.104/32",
"tags": [
{
"value": "DSS Dev2",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.67/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.66/32",
"tags": [],
"status": "authorized"
}
],
"description": "More addresses",
"tags": [],
"clusterSecurityGroupName": "access1"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "67.190.26.136/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.159.20/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.91.76.245/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.0/20",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.208.19.24/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "174.116.159.187/32",
"tags": [],
"status": "authorized"
}
],
"description": "even more ACLs",
"tags": [],
"clusterSecurityGroupName": "access2"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "72.182.46.26/32",
"tags": [],
"status": "authorized"
}
],
"description": "ACLs",
"tags": [],
"clusterSecurityGroupName": "access3"
},
{
"eC2SecurityGroups": [
{
"status": "authorized",
"eC2SecurityGroupOwnerId": "836073662699",
"eC2SecurityGroupName": "tableauserver",
"tags": []
},
{
"status": "authorized",
"eC2SecurityGroupOwnerId": "836073662699",
"eC2SecurityGroupName": "default",
"tags": []
}
],
"iPRanges": [
{
"cIDRIP": "24.18.196.110/32",
"tags": [
{
"value": "Jerry Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.173.9.88/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.155.184/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "108.60.56.18/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "97.77.90.0/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "107.0.83.90/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "10.95.168.100/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "198.147.209.15/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.71.116/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.7/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "50.34.223.215/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.165.217.223/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.76.13/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.153.252/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "72.182.50.151/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.43.75/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "198.134.89.186/32",
"tags": [],
"status": "authorized"
}
],
"description": "default",
"tags": [
{
"value": "DefaultRedshft",
"key": "Name"
}
],
"clusterSecurityGroupName": "default"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "34.204.236.103/32",
"tags": [],
"status": "authorized"
}
],
"description": "Access from proxy VM for VPN access",
"tags": [],
"clusterSecurityGroupName": "proxy-vm"
}
]
},
"requestID": "da172fc9-9d95-11e7-9cda-97adce348902",
"eventID": "165fad5a-d9f5-4226-9a15-cd43f7b0e43d",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.173.51.226",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "fd76d9c0-6472-4c8e-8f0c-df5fc1e999e2",
"eventID": "28c66b6a-7420-4ae6-995b-42568744233c",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:57Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.147.86.214",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "a99f2d8f-9a4d-432c-9ce2-92b1e787910a",
"eventID": "fd233c51-c2aa-45a0-a51c-1d2136f60137",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AWSService",
"invokedBy": "config.amazonaws.com"
},
"eventTime": "2017-09-19T23:54:21Z",
"eventSource": "sts.amazonaws.com",
"eventName": "AssumeRole",
"awsRegion": "us-east-1",
"sourceIPAddress": "config.amazonaws.com",
"userAgent": "config.amazonaws.com",
"requestParameters": {
"roleArn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
"roleSessionName": "AutoScalingDescribeHandlerSession"
},
"responseElements": {
"credentials": {
"accessKeyId": "ASIAJFCICIJZDAF6PXTA",
"expiration": "Sep 20, 2017 12:54:21 AM",
"sessionToken": "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\\u003d"
},
"assumedRoleUser": {
"assumedRoleId": "AROAIY55HROFL5CKSWD4Y:AutoScalingDescribeHandlerSession",
"arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AutoScalingDescribeHandlerSession"
}
},
"requestID": "db3745bb-9d95-11e7-b056-99c62b38392f",
"eventID": "d95c4b17-b274-44a6-8f5a-b777fdd30f25",
"resources": [
{
"ARN": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
"accountId": "836073662699",
"type": "AWS::IAM::Role"
}
],
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699",
"sharedEventID": "8ccb857f-02fa-4c21-9528-f3282d4d202e"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "AWSService",
"invokedBy": "config.amazonaws.com"
},
"eventTime": "2017-09-19T23:54:21Z",
"eventSource": "sts.amazonaws.com",
"eventName": "AssumeRole",
"awsRegion": "us-east-1",
"sourceIPAddress": "config.amazonaws.com",
"userAgent": "config.amazonaws.com",
"requestParameters": {
"roleArn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
"roleSessionName": "AWSConfig-Describe"
},
"responseElements": {
"credentials": {
"accessKeyId": "ASIAIOV6JLC3RJ4SN4AA",
"expiration": "Sep 20, 2017 12:54:21 AM",
"sessionToken": "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\\u003d"
},
"assumedRoleUser": {
"assumedRoleId": "AROAIY55HROFL5CKSWD4Y:AWSConfig-Describe",
"arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AWSConfig-Describe"
}
},
"requestID": "db4f88ad-9d95-11e7-8027-7dfe4b0af8f1",
"eventID": "0ed3822e-b3ae-455b-bce4-45a34df0e290",
"resources": [
{
"ARN": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
"accountId": "836073662699",
"type": "AWS::IAM::Role"
}
],
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699",
"sharedEventID": "aa7e0212-7cc2-474c-8831-62859a669007"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:36Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.234.33.248",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "78439faf-72c9-48d1-830e-6c4e6fa26eb9",
"eventID": "417250db-8e75-4967-a049-a7fb07205477",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:00Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "107.22.20.81",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "277ad169-1adb-4863-b2cf-447a14e98759",
"eventID": "4785c8e2-8d85-405d-9704-eed2511c27fc",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAILUTBF5H2JPTYJPAM",
"arn": "arn:aws:iam::836073662699:user/[email protected]",
"accountId": "836073662699",
"accessKeyId": "ASIAIN2CLER45LBXZ4HA",
"userName": "[email protected]",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T14:11:46Z"
}
},
"invokedBy": "signin.amazonaws.com"
},
"eventTime": "2017-09-19T23:55:22Z",
"eventSource": "redshift.amazonaws.com",
"eventName": "DescribeClusters",
"awsRegion": "us-east-1",
"sourceIPAddress": "24.18.192.230",
"userAgent": "signin.amazonaws.com",
"requestParameters": null,
"responseElements": {
"clusters": [
{
"nodeType": "dc1.large",
"preferredMaintenanceWindow": "fri:09:00-fri:09:30",
"clusterStatus": "available",
"clusterCreateTime": "May 4, 2015 4:18:03 PM",
"enhancedVpcRouting": false,
"endpoint": {
"port": 5439,
"address": "rightside-dw-r.cwisduywvaeb.us-east-1.redshift.amazonaws.com"
},
"masterUsername": "masteruser",
"clusterSecurityGroups": [
{
"status": "active",
"clusterSecurityGroupName": "default"
},
{
"status": "active",
"clusterSecurityGroupName": "access"
},
{
"status": "active",
"clusterSecurityGroupName": "access1"
},
{
"status": "active",
"clusterSecurityGroupName": "access2"
},
{
"status": "active",
"clusterSecurityGroupName": "proxy-vm"
}
],
"pendingModifiedValues": {},
"dBName": "rightsidedw",
"availabilityZone": "us-east-1b",
"clusterVersion": "1.0",
"encrypted": false,
"clusterPublicKey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMg6xK+JtmKZWahr0Gc+cKZKjwa1KakBndc3r/NclrFP/sfFrBI3iHbaT0Jf8nbtyFDjceI3qD++9hcDwZwkiedecIAKic4eIum953ubE3DU32+J5E826C18mSzhypHycgP6y3MeoClMhWkFJZVdffHo8k1uoY6uGyJ695n7gS/zicX7KCloItqIrLKIcz2qwkqnd7FNcDjSBGF/3cA6TX5zngps7uhZx+qTEe2onAjsvUh+QH4pHXhQL4GqTZ6rE2Y/wv0v+VFYbMm+izWsLoSs3kpdw428WCYpdGia2MA+yCJmLdiuTri4IU5Fty6lhZ9NF++4p5YjXxwpET4Rg5 Amazon-Redshift\n",
"clusterNodes": [
{
"publicIPAddress": "184.73.123.149",
"nodeRole": "LEADER",
"privateIPAddress": "10.234.108.227"
},
{
"publicIPAddress": "23.22.54.122",
"nodeRole": "COMPUTE-0",
"privateIPAddress": "10.165.108.240"
},
{
"publicIPAddress": "54.166.26.205",
"nodeRole": "COMPUTE-1",
"privateIPAddress": "10.140.157.70"
},
{
"publicIPAddress": "54.146.178.189",
"nodeRole": "COMPUTE-2",
"privateIPAddress": "10.178.204.229"
},
{
"publicIPAddress": "174.129.184.209",
"nodeRole": "COMPUTE-3",
"privateIPAddress": "10.142.202.72"
},
{
"publicIPAddress": "54.242.1.196",
"nodeRole": "COMPUTE-4",
"privateIPAddress": "10.11.169.99"
},
{
"publicIPAddress": "174.129.65.131",
"nodeRole": "COMPUTE-5",
"privateIPAddress": "10.63.62.94"
},
{
"publicIPAddress": "54.205.164.200",
"nodeRole": "COMPUTE-6",
"privateIPAddress": "10.37.164.97"
},
{
"publicIPAddress": "54.242.121.142",
"nodeRole": "COMPUTE-7",
"privateIPAddress": "10.142.206.165"
}
],
"publiclyAccessible": true,
"tags": [
{
"value": "edw-prod",
"key": "Platform"
},
{
"value": "MainRedshift",
"key": "Name"
}
],
"clusterParameterGroups": [
{
"parameterGroupName": "default.redshift-1.0",
"parameterApplyStatus": "in-sync"
}
],
"allowVersionUpgrade": true,
"clusterRevisionNumber": "1430",
"automatedSnapshotRetentionPeriod": 1,
"numberOfNodes": 8,
"vpcSecurityGroups": [],
"iamRoles": [],
"clusterIdentifier": "rightside-dw-r"
}
]
},
"requestID": "ffb3069c-9d95-11e7-90a6-e19a19b7b2d5",
"eventID": "27645bba-f22f-4936-b72b-1a75ec2d756d",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:41Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.234.33.248",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "ca0e28f0-3aa8-40f8-bb82-7aaf98b57da0",
"eventID": "0dc23817-d54c-4e6a-a915-1b9b3e7a9ab2",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:23Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.165.160.164",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "a0a9389c-9d91-472e-92fb-b51092908f22",
"eventID": "aa2c11f7-46ff-4905-a200-87a00f597033",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:01Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.147.184.112",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "e4e51502-44b7-4734-97f9-db368fa56c3c",
"eventID": "1bfb9e31-61bf-47c8-ab2d-512879543c00",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:34Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.225.59.80",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "553c1a06-9f42-42b6-9e32-54f561fae9fb",
"eventID": "571412fa-9cbd-4f75-a463-d0588f2db5f3",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:43Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.172.37.251",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "6d67af3e-57ab-4c4e-afcf-1f32949ae630",
"eventID": "e5897496-175d-4436-9df3-a7325ca88ede",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAIY55HROFL5CKSWD4Y:AWSConfig-Describe",
"arn": "arn:aws:sts::836073662699:assumed-role/config-role-us-east-1/AWSConfig-Describe",
"accountId": "836073662699",
"accessKeyId": "ASIAJ6KZYR3QXGUYOXMA",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T23:54:21Z"
},
"sessionIssuer": {
"type": "Role",
"principalId": "AROAIY55HROFL5CKSWD4Y",
"arn": "arn:aws:iam::836073662699:role/service-role/config-role-us-east-1",
"accountId": "836073662699",
"userName": "config-role-us-east-1"
}
},
"invokedBy": "config.amazonaws.com"
},
"eventTime": "2017-09-19T23:54:21Z",
"eventSource": "acm.amazonaws.com",
"eventName": "ListCertificates",
"awsRegion": "us-east-1",
"sourceIPAddress": "config.amazonaws.com",
"userAgent": "config.amazonaws.com",
"requestParameters": null,
"responseElements": null,
"requestID": "db57ecfa-9d95-11e7-a6a0-8b5ff0b3ee1f",
"eventID": "ceb79ad2-3dd9-4b0e-964c-44b77ae78fa5",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:53:08Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeSpotInstanceRequests",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"spotInstanceRequestIdSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "a5444806-dc9f-4717-a9fd-d583df667523",
"eventID": "e570606b-2775-493a-9212-325be1b037e7",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAI5HSV5Q3AL3LD7SNA",
"arn": "arn:aws:iam::836073662699:user/svc-lookglass-prd",
"accountId": "836073662699",
"accessKeyId": "AKIAIYTEDDZFXFO2MOKA",
"userName": "svc-lookglass-prd"
},
"eventTime": "2017-09-19T23:53:07Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.204.248.185",
"userAgent": "Boto/2.38.0 Python/2.7.6 Linux/3.13.0-63-generic",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "286a9e5a-26c8-4146-8b26-38d72d573fc5",
"eventID": "ed9565a1-f5ae-4b15-91f9-af86c40dc8bf",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:06Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "52.6.147.236",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "71ddc35b-113b-4edd-87d0-d81aae02b8ca",
"eventID": "a7917034-3300-441e-95bb-8803309582b9",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:54:23Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.165.160.164",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "dbe24e0b-9568-407d-a5ac-0887e91c85fd",
"eventID": "e724ffb3-e491-4b69-9102-25ab0dbdda58",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:59Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.197.60.114",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "d987dbec-ca28-4870-8cac-504eec2f338c",
"eventID": "aa20ac12-885d-4464-ac23-819cc4eaa7dd",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:03Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.225.53.250",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "b5d1268a-80eb-4952-aa6b-1b77b34addbd",
"eventID": "f4535b47-5ceb-4b31-9d88-399b3a079e7e",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:43Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "54.172.37.251",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "7528812a-e64e-42ff-8623-ae35c145deff",
"eventID": "3ac8db8f-da40-4593-996c-59c36ed74503",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:53:56Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "34.199.66.140",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "f2aa06b5-9828-4bdc-8912-631929630325",
"eventID": "37e5bf58-0470-4e8c-af91-3e0870207694",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAILUTBF5H2JPTYJPAM",
"arn": "arn:aws:iam::836073662699:user/[email protected]",
"accountId": "836073662699",
"accessKeyId": "ASIAIN2CLER45LBXZ4HA",
"userName": "[email protected]",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T14:11:46Z"
}
},
"invokedBy": "signin.amazonaws.com"
},
"eventTime": "2017-09-19T23:53:19Z",
"eventSource": "redshift.amazonaws.com",
"eventName": "DescribeClusterSecurityGroups",
"awsRegion": "us-east-1",
"sourceIPAddress": "24.18.192.230",
"userAgent": "signin.amazonaws.com",
"requestParameters": null,
"responseElements": {
"clusterSecurityGroups": [
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "76.178.88.240/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.175.102.28/32",
"tags": [
{
"value": "looking_glass",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "70.112.13.35/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "72.179.22.90/32",
"tags": [
{
"value": "Scott Ryder Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "50.34.162.34/32",
"tags": [
{
"value": "Kevin Fink Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "76.178.93.38/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.0.99.159/32",
"tags": [
{
"value": "looking_glass_stg",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "98.203.243.147/32",
"tags": [
{
"value": "Drew MacPherson Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "52.0.74.74/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "67.79.8.126/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.5.227.171/32",
"tags": [
{
"value": "DSS Dev1",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "50.170.31.147/32",
"tags": [
{
"value": "Carolyn at home",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "173.160.205.246/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.152.32.20/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "149.11.36.178/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.130.177/32",
"tags": [
{
"value": "Kelvin Osborne Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.152.143.252/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "73.157.1.96/32",
"tags": [
{
"value": "Drew MacPherson Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.152.133.246/32",
"tags": [],
"status": "authorized"
}
],
"description": "Test to see if I can add more access rules",
"tags": [],
"clusterSecurityGroupName": "access"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "198.134.93.234/32",
"tags": [
{
"value": "Nate Gillespie",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "174.16.221.227/32",
"tags": [
{
"value": "Nate Gillespie",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.89/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.12/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.72/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.130/32",
"tags": [
{
"value": "Kirkland VPN",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "52.7.30.104/32",
"tags": [
{
"value": "DSS Dev2",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.67/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.66/32",
"tags": [],
"status": "authorized"
}
],
"description": "More addresses",
"tags": [],
"clusterSecurityGroupName": "access1"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "67.190.26.136/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.159.20/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.91.76.245/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.0/20",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.208.19.24/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "174.116.159.187/32",
"tags": [],
"status": "authorized"
}
],
"description": "even more ACLs",
"tags": [],
"clusterSecurityGroupName": "access2"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "72.182.46.26/32",
"tags": [],
"status": "authorized"
}
],
"description": "ACLs",
"tags": [],
"clusterSecurityGroupName": "access3"
},
{
"eC2SecurityGroups": [
{
"status": "authorized",
"eC2SecurityGroupOwnerId": "836073662699",
"eC2SecurityGroupName": "tableauserver",
"tags": []
},
{
"status": "authorized",
"eC2SecurityGroupOwnerId": "836073662699",
"eC2SecurityGroupName": "default",
"tags": []
}
],
"iPRanges": [
{
"cIDRIP": "24.18.196.110/32",
"tags": [
{
"value": "Jerry Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.173.9.88/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.155.184/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "108.60.56.18/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "97.77.90.0/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "107.0.83.90/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "10.95.168.100/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "198.147.209.15/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.71.116/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.7/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "50.34.223.215/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.165.217.223/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.76.13/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.153.252/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "72.182.50.151/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.43.75/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "198.134.89.186/32",
"tags": [],
"status": "authorized"
}
],
"description": "default",
"tags": [
{
"value": "DefaultRedshft",
"key": "Name"
}
],
"clusterSecurityGroupName": "default"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "34.204.236.103/32",
"tags": [],
"status": "authorized"
}
],
"description": "Access from proxy VM for VPN access",
"tags": [],
"clusterSecurityGroupName": "proxy-vm"
}
]
},
"requestID": "b6528afd-9d95-11e7-8f90-e9207bd3d747",
"eventID": "c421ad2b-4753-45fa-84fb-d24fc1d0311c",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.04",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAILUTBF5H2JPTYJPAM",
"arn": "arn:aws:iam::836073662699:user/[email protected]",
"accountId": "836073662699",
"accessKeyId": "ASIAIN2CLER45LBXZ4HA",
"userName": "[email protected]",
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false",
"creationDate": "2017-09-19T14:11:46Z"
}
},
"invokedBy": "signin.amazonaws.com"
},
"eventTime": "2017-09-19T23:55:20Z",
"eventSource": "redshift.amazonaws.com",
"eventName": "DescribeClusterSecurityGroups",
"awsRegion": "us-east-1",
"sourceIPAddress": "24.18.192.230",
"userAgent": "signin.amazonaws.com",
"requestParameters": null,
"responseElements": {
"clusterSecurityGroups": [
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "76.178.88.240/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.175.102.28/32",
"tags": [
{
"value": "looking_glass",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "70.112.13.35/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "72.179.22.90/32",
"tags": [
{
"value": "Scott Ryder Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "50.34.162.34/32",
"tags": [
{
"value": "Kevin Fink Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "76.178.93.38/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.0.99.159/32",
"tags": [
{
"value": "looking_glass_stg",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "98.203.243.147/32",
"tags": [
{
"value": "Drew MacPherson Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "52.0.74.74/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "67.79.8.126/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.5.227.171/32",
"tags": [
{
"value": "DSS Dev1",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "50.170.31.147/32",
"tags": [
{
"value": "Carolyn at home",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "173.160.205.246/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.152.32.20/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "149.11.36.178/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.130.177/32",
"tags": [
{
"value": "Kelvin Osborne Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.152.143.252/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "73.157.1.96/32",
"tags": [
{
"value": "Drew MacPherson Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.152.133.246/32",
"tags": [],
"status": "authorized"
}
],
"description": "Test to see if I can add more access rules",
"tags": [],
"clusterSecurityGroupName": "access"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "198.134.93.234/32",
"tags": [
{
"value": "Nate Gillespie",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "174.16.221.227/32",
"tags": [
{
"value": "Nate Gillespie",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.89/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.12/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.72/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.130/32",
"tags": [
{
"value": "Kirkland VPN",
"key": "Name"
}
],
"status": "authorized"
},
{
"cIDRIP": "52.7.30.104/32",
"tags": [
{
"value": "DSS Dev2",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.67/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.157.66/32",
"tags": [],
"status": "authorized"
}
],
"description": "More addresses",
"tags": [],
"clusterSecurityGroupName": "access1"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "67.190.26.136/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.159.20/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "52.91.76.245/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.0/20",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "54.208.19.24/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "174.116.159.187/32",
"tags": [],
"status": "authorized"
}
],
"description": "even more ACLs",
"tags": [],
"clusterSecurityGroupName": "access2"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "72.182.46.26/32",
"tags": [],
"status": "authorized"
}
],
"description": "ACLs",
"tags": [],
"clusterSecurityGroupName": "access3"
},
{
"eC2SecurityGroups": [
{
"status": "authorized",
"eC2SecurityGroupOwnerId": "836073662699",
"eC2SecurityGroupName": "tableauserver",
"tags": []
},
{
"status": "authorized",
"eC2SecurityGroupOwnerId": "836073662699",
"eC2SecurityGroupName": "default",
"tags": []
}
],
"iPRanges": [
{
"cIDRIP": "24.18.196.110/32",
"tags": [
{
"value": "Jerry Home",
"key": "Owner"
}
],
"status": "authorized"
},
{
"cIDRIP": "54.173.9.88/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.155.184/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "108.60.56.18/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "97.77.90.0/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "107.0.83.90/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "10.95.168.100/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "198.147.209.15/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.71.116/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.144.7/24",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "50.34.223.215/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.165.217.223/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.76.13/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "69.64.153.252/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "72.182.50.151/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "99.224.43.75/32",
"tags": [],
"status": "authorized"
},
{
"cIDRIP": "198.134.89.186/32",
"tags": [],
"status": "authorized"
}
],
"description": "default",
"tags": [
{
"value": "DefaultRedshft",
"key": "Name"
}
],
"clusterSecurityGroupName": "default"
},
{
"eC2SecurityGroups": [],
"iPRanges": [
{
"cIDRIP": "34.204.236.103/32",
"tags": [],
"status": "authorized"
}
],
"description": "Access from proxy VM for VPN access",
"tags": [],
"clusterSecurityGroupName": "proxy-vm"
}
]
},
"requestID": "fdd9b25f-9d95-11e7-b94d-ad0be3b0bac3",
"eventID": "df90c307-8a2f-45ae-98f0-374c0174c73e",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
},
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDAJE4OISGTZNKQGSORC",
"arn": "arn:aws:iam::836073662699:user/DizzyNinja",
"accountId": "836073662699",
"accessKeyId": "AKIAJDI52E7KXH7TSQQQ",
"userName": "DizzyNinja"
},
"eventTime": "2017-09-19T23:55:00Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "DescribeInstances",
"awsRegion": "us-east-1",
"sourceIPAddress": "107.22.20.81",
"userAgent": "aws-sdk-dotnet-45/2.0.14.0 .NET Runtime/4.0 .NET Framework/4.0 OS/6.2.9200.0",
"requestParameters": {
"instancesSet": {},
"filterSet": {}
},
"responseElements": null,
"requestID": "39869640-5f82-41a8-a82b-d24f3b009715",
"eventID": "e8352f91-dcff-4caf-b8ba-30a168a5ab9d",
"eventType": "AwsApiCall",
"recipientAccountId": "836073662699"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment