simple parsing of aws cloudtrail logs

parse.php

<?php

$files = glob("*.json");

foreach($files as $file) {
        $content = file_get_contents($file);
        $data = json_decode($content, true);
        if(!isset($data['Records'])) {
                continue;
        }

        foreach($data["Records"] as $event) {
                if(!isset($event['userIdentity'])) {
                        var_dump($event);
                        die();
                }

	            if(stristr($event['eventName'], 'Describe')) {
		            continue;
	            }
		        $requestParams = '';
                if(count($event['requestParameters'])) {
                        $it = new RecursiveIteratorIterator(new RecursiveArrayIterator($event['requestParameters']));
                        foreach($it as $v) {
                                $requestParams .= "{$v}, ";
                        }
                }
                $time = new DateTime($event['eventTime'], new DateTimeZone('UTC'));
                $time->setTimezone(new DateTimeZone('Pacific/Auckland'));
                echo $time->format('Y-m-d H:i:s').' ';
                echo str_pad($event['eventName'],35).' ';
                echo str_pad($event['sourceIPAddress'], 35).' ';
	            if(isset($event['userIdentity']['userName'])) echo $event['userIdentity']['userName'].' ';

                echo $requestParams.PHP_EOL;
        }
}