{
  "cloud_accounts": [
    {
      "id": 1,
      "provider": "aws",
      "aws_account_id": "802411915824",
      "azure_subscription_id": null,
      "workload": "partner-api",
      "environment": "staging"
    },
    {
      "id": 2,
      "provider": "azure",
      "aws_account_id": null,
      "azure_subscription_id": "2e1ac955-caab-42b2-8d38-b8a4e0021f51",
      "workload": "web-storefront",
      "environment": "development"
    },
    {
      "id": 3,
      "provider": "azure",
      "aws_account_id": null,
      "azure_subscription_id": "d5b69e7d-639a-4ad5-9a96-fc0e74eefdb5",
      "workload": "shared-network",
      "environment": "production"
    },
    {
      "id": 4,
      "provider": "aws",
      "aws_account_id": "087170051708",
      "azure_subscription_id": null,
      "workload": "payments",
      "environment": "production"
    },
    {
      "id": 5,
      "provider": "azure",
      "aws_account_id": null,
      "azure_subscription_id": "54b581f3-8add-40e2-a187-55988dd152c4",
      "workload": "data-lake",
      "environment": "development"
    },
    {
      "id": 6,
      "provider": "aws",
      "aws_account_id": "950234366577",
      "azure_subscription_id": null,
      "workload": "mobile-backend",
      "environment": "production"
    },
    {
      "id": 7,
      "provider": "aws",
      "aws_account_id": "488204354178",
      "azure_subscription_id": null,
      "workload": "central-logging",
      "environment": "production"
    },
    {
      "id": 8,
      "provider": "aws",
      "aws_account_id": "080732898278",
      "azure_subscription_id": null,
      "workload": "analytics",
      "environment": "development"
    },
    {
      "id": 9,
      "provider": "aws",
      "aws_account_id": "808908794875",
      "azure_subscription_id": null,
      "workload": "internal-tools",
      "environment": "production"
    },
    {
      "id": 10,
      "provider": "azure",
      "aws_account_id": null,
      "azure_subscription_id": "9ac3e8d9-20a3-4193-8779-c65fbe02ddc2",
      "workload": "identity",
      "environment": "development"
    },
    {
      "id": 11,
      "provider": "aws",
      "aws_account_id": "570360570938",
      "azure_subscription_id": null,
      "workload": "backup",
      "environment": "staging"
    },
    {
      "id": 12,
      "provider": "azure",
      "aws_account_id": null,
      "azure_subscription_id": "2d74562a-0fec-47ab-9141-6831a28d0776",
      "workload": "ml-training",
      "environment": "staging"
    }
  ],
  "principals": [
    {
      "id": 1,
      "account_id": 4,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "readonly monitoring",
      "created_at": "2026-04-11 17:22:38"
    },
    {
      "id": 2,
      "account_id": 9,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "monitoring deploy",
      "created_at": "2026-03-04 14:23:00"
    },
    {
      "id": 3,
      "account_id": 6,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "platform ingest",
      "created_at": "2026-05-15 10:05:12"
    },
    {
      "id": 4,
      "account_id": 1,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "monitoring pipeline",
      "created_at": "2026-02-14 08:25:44"
    },
    {
      "id": 5,
      "account_id": 4,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "pipeline scheduler",
      "created_at": "2026-04-23 11:57:33"
    },
    {
      "id": 6,
      "account_id": 12,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "backup ingest",
      "created_at": "2026-01-25 09:46:46"
    },
    {
      "id": 7,
      "account_id": 7,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "backup terraform",
      "created_at": "2026-02-28 16:42:16"
    },
    {
      "id": 8,
      "account_id": 6,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "deploy monitoring",
      "created_at": "2026-02-21 15:22:13"
    },
    {
      "id": 9,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "export monitoring",
      "created_at": "2026-03-22 10:57:45"
    },
    {
      "id": 10,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "delfina.kozey-schaden@example.org",
      "role_name": null,
      "created_at": "2026-03-15 17:09:32"
    },
    {
      "id": 11,
      "account_id": 3,
      "provider": "azure",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "pipeline deploy",
      "created_at": "2026-05-24 10:06:16"
    },
    {
      "id": 12,
      "account_id": 8,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "jaquelin_willms62@example.net",
      "role_name": null,
      "created_at": "2026-03-02 14:41:05"
    },
    {
      "id": 13,
      "account_id": 10,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "jaiden.botsford@example.com",
      "role_name": null,
      "created_at": "2026-02-22 08:11:20"
    },
    {
      "id": 14,
      "account_id": 10,
      "provider": "azure",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "pipeline terraform",
      "created_at": "2026-01-31 07:02:26"
    },
    {
      "id": 15,
      "account_id": 7,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "carrie_haag@example.org",
      "role_name": null,
      "created_at": "2026-03-28 11:17:54"
    },
    {
      "id": 16,
      "account_id": 10,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "lloyd.jakubowski68@example.org",
      "role_name": null,
      "created_at": "2026-04-17 18:36:48"
    },
    {
      "id": 17,
      "account_id": 11,
      "provider": "aws",
      "principal_type": "break-glass admin",
      "user_email": "sylvia.ebert70@example.net",
      "role_name": null,
      "created_at": "2026-05-05 10:38:29"
    },
    {
      "id": 18,
      "account_id": 3,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "dannie_balistreri9@example.com",
      "role_name": null,
      "created_at": "2026-05-01 08:20:36"
    },
    {
      "id": 19,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "backup export",
      "created_at": "2026-02-14 11:26:09"
    },
    {
      "id": 20,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "platform billing",
      "created_at": "2026-04-08 16:45:54"
    },
    {
      "id": 21,
      "account_id": 8,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "elian.koch63@example.com",
      "role_name": null,
      "created_at": "2026-04-25 16:48:55"
    },
    {
      "id": 22,
      "account_id": 4,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "oda_buckridge46@example.org",
      "role_name": null,
      "created_at": "2026-04-10 17:56:01"
    },
    {
      "id": 23,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "scheduler readonly",
      "created_at": "2026-02-07 11:05:42"
    },
    {
      "id": 24,
      "account_id": 12,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "donnie_littel@example.com",
      "role_name": null,
      "created_at": "2026-03-07 10:22:16"
    },
    {
      "id": 25,
      "account_id": 1,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "scheduler readonly",
      "created_at": "2026-02-06 10:54:15"
    },
    {
      "id": 26,
      "account_id": 12,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "export ingest",
      "created_at": "2026-02-13 13:15:47"
    },
    {
      "id": 27,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "joel_barrows21@example.net",
      "role_name": null,
      "created_at": "2026-03-26 16:33:39"
    },
    {
      "id": 28,
      "account_id": 12,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "shelly.tillman@example.org",
      "role_name": null,
      "created_at": "2026-02-18 14:46:32"
    },
    {
      "id": 29,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "onie_purdy91@example.net",
      "role_name": null,
      "created_at": "2026-02-27 13:15:41"
    },
    {
      "id": 30,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "billing readonly",
      "created_at": "2026-05-09 08:55:20"
    },
    {
      "id": 31,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "platform billing",
      "created_at": "2026-03-16 11:52:29"
    },
    {
      "id": 32,
      "account_id": 7,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "marques_kertzmann10@example.net",
      "role_name": null,
      "created_at": "2026-03-19 16:57:13"
    },
    {
      "id": 33,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "terraform backup",
      "created_at": "2026-02-19 17:57:00"
    },
    {
      "id": 34,
      "account_id": 6,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "laney_ondricka64@example.com",
      "role_name": null,
      "created_at": "2026-04-03 14:44:49"
    },
    {
      "id": 35,
      "account_id": 6,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "export terraform",
      "created_at": "2026-03-06 18:30:09"
    },
    {
      "id": 36,
      "account_id": 3,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "pipeline scheduler",
      "created_at": "2026-01-07 15:11:24"
    },
    {
      "id": 37,
      "account_id": 8,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "scheduler deploy",
      "created_at": "2026-01-20 16:24:14"
    },
    {
      "id": 38,
      "account_id": 1,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "ingest monitoring",
      "created_at": "2026-03-27 10:11:12"
    },
    {
      "id": 39,
      "account_id": 1,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "deshawn_sporer75@example.org",
      "role_name": null,
      "created_at": "2026-01-14 10:39:22"
    },
    {
      "id": 40,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "guido.herzog90@example.net",
      "role_name": null,
      "created_at": "2026-03-23 09:46:54"
    },
    {
      "id": 41,
      "account_id": 8,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "scheduler reporting",
      "created_at": "2026-05-24 10:43:24"
    },
    {
      "id": 42,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "scheduler billing",
      "created_at": "2026-01-24 09:57:15"
    },
    {
      "id": 43,
      "account_id": 4,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "billing reporting",
      "created_at": "2026-03-09 09:19:23"
    },
    {
      "id": 44,
      "account_id": 11,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "torrey.bruen61@example.com",
      "role_name": null,
      "created_at": "2026-01-25 13:58:05"
    },
    {
      "id": 45,
      "account_id": 1,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "alexys.thiel@example.net",
      "role_name": null,
      "created_at": "2026-02-04 10:34:27"
    },
    {
      "id": 46,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "jo_rippin@example.org",
      "role_name": null,
      "created_at": "2026-05-26 15:13:10"
    },
    {
      "id": 47,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "gaetano_jones45@example.net",
      "role_name": null,
      "created_at": "2026-03-11 20:49:54"
    },
    {
      "id": 48,
      "account_id": 6,
      "provider": "aws",
      "principal_type": "break-glass admin",
      "user_email": "mollie_pagac@example.com",
      "role_name": null,
      "created_at": "2026-01-27 12:08:52"
    },
    {
      "id": 49,
      "account_id": 9,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "marisa.lynch98@example.com",
      "role_name": null,
      "created_at": "2026-05-22 14:30:05"
    },
    {
      "id": 50,
      "account_id": 9,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "ingest billing",
      "created_at": "2026-01-05 17:02:35"
    },
    {
      "id": 51,
      "account_id": 5,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "reporting deploy",
      "created_at": "2026-04-17 14:29:57"
    },
    {
      "id": 52,
      "account_id": 11,
      "provider": "aws",
      "principal_type": "service identity",
      "user_email": null,
      "role_name": "pipeline terraform",
      "created_at": "2026-01-28 12:58:24"
    },
    {
      "id": 53,
      "account_id": 10,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "export ingest",
      "created_at": "2026-02-14 14:36:22"
    },
    {
      "id": 54,
      "account_id": 3,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "reporting terraform",
      "created_at": "2026-03-04 10:38:33"
    },
    {
      "id": 55,
      "account_id": 6,
      "provider": "aws",
      "principal_type": "human user",
      "user_email": "kasandra.veum-damore@example.com",
      "role_name": null,
      "created_at": "2026-04-15 10:10:09"
    },
    {
      "id": 56,
      "account_id": 10,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "karson_balistreri0@example.net",
      "role_name": null,
      "created_at": "2026-03-25 10:36:35"
    },
    {
      "id": 57,
      "account_id": 3,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "readonly monitoring",
      "created_at": "2026-05-10 16:24:56"
    },
    {
      "id": 58,
      "account_id": 1,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "pipeline export",
      "created_at": "2026-02-12 20:49:04"
    },
    {
      "id": 59,
      "account_id": 3,
      "provider": "azure",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "ingest scheduler",
      "created_at": "2026-04-10 09:19:42"
    },
    {
      "id": 60,
      "account_id": 2,
      "provider": "azure",
      "principal_type": "human user",
      "user_email": "toni.hintz67@example.com",
      "role_name": null,
      "created_at": "2026-02-21 13:51:56"
    },
    {
      "id": 61,
      "account_id": 8,
      "provider": "aws",
      "principal_type": "assumed role",
      "user_email": null,
      "role_name": "platform billing",
      "created_at": "2026-03-19 11:38:46"
    }
  ],
  "api_calls": [
    {
      "id": 1,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-21 21:54:55",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "198.51.100.53",
      "outcome": "Success",
      "request_id": "f695cfae-4ce6-43df-a598-ca3f9ebbda90"
    },
    {
      "id": 2,
      "principal_id": 8,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-02-22 14:52:58",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.215",
      "outcome": "Success",
      "request_id": "567b2c4a-1ab5-49a5-a0dc-181d6d557efa"
    },
    {
      "id": 3,
      "principal_id": 45,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-06 20:02:06",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "203.0.113.81",
      "outcome": "Success",
      "request_id": "35493cc9-7b66-40ce-9d81-74c77d0f71ed"
    },
    {
      "id": 4,
      "principal_id": 58,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-15 02:38:51",
      "operation": "identity.CreateUser",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.17",
      "outcome": "AccessDenied",
      "request_id": "a18bf2c6-2ed6-41bb-b0cf-4bfaef5b811b"
    },
    {
      "id": 5,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-15 22:20:51",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.140",
      "outcome": "Success",
      "request_id": "35e9f9e4-2634-4606-8a59-c924e068e5ef"
    },
    {
      "id": 6,
      "principal_id": 60,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-22 03:30:56",
      "operation": "compute.StartInstance",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "198.51.100.82",
      "outcome": "Success",
      "request_id": "d699d528-9c55-449c-8bc8-b260ff8388a2"
    },
    {
      "id": 7,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-07 21:03:38",
      "operation": "billing.GetCostReport",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.2",
      "outcome": "Success",
      "request_id": "d55b0014-7278-4ca9-93e4-f80c25c40e03"
    },
    {
      "id": 8,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-01-25 04:45:58",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.224",
      "outcome": "Success",
      "request_id": "565a4880-debd-42b9-bfc1-532d7d9d7e52"
    },
    {
      "id": 9,
      "principal_id": 35,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-09 01:43:21",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.53",
      "outcome": "Success",
      "request_id": "6cffed65-1d57-407f-8978-0305a2881a77"
    },
    {
      "id": 10,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-11 11:21:31",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "command line",
      "source_ip": "192.0.2.78",
      "outcome": "Success",
      "request_id": "5895df14-f593-4c43-9374-9d3a05d47ea2"
    },
    {
      "id": 11,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-03 07:41:23",
      "operation": "identity.ListRoles",
      "region": "us-2",
      "client": "web console",
      "source_ip": "203.0.113.61",
      "outcome": "Success",
      "request_id": "2db2af83-141f-411c-84e1-6fd50b231de7"
    },
    {
      "id": 12,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-02 01:16:30",
      "operation": "audit.StopLogging",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.98",
      "outcome": "Success",
      "request_id": "2714c726-37b7-4efc-ba25-1fb3d756120c"
    },
    {
      "id": 13,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-28 01:43:36",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.98",
      "outcome": "Success",
      "request_id": "c80327da-84e6-4590-b22f-3d2c3b6c628a"
    },
    {
      "id": 14,
      "principal_id": 49,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-05-23 06:08:58",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.107",
      "outcome": "Success",
      "request_id": "787f718c-4132-41f8-a210-8c99481da33c"
    },
    {
      "id": 15,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-29 04:43:45",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "192.0.2.6",
      "outcome": "Success",
      "request_id": "4506edd2-c232-4330-b59c-6b6f2a1a5323"
    },
    {
      "id": 16,
      "principal_id": 8,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-02-25 10:57:21",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.29",
      "outcome": "Success",
      "request_id": "a45be227-8270-4ce0-adaf-628607e60cc0"
    },
    {
      "id": 17,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-10 20:01:14",
      "operation": "identity.AttachAdminPolicy",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.98",
      "outcome": "Success",
      "request_id": "495eaa39-3326-438b-a535-21ddefb57d6f"
    },
    {
      "id": 18,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-01 15:27:37",
      "operation": "identity.CreateAccessKey",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.84",
      "outcome": "Success",
      "request_id": "a3a2ea5d-2e8a-47a1-bf71-053b79cb9f6b"
    },
    {
      "id": 19,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-05-25 08:38:53",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.105",
      "outcome": "ValidationError",
      "request_id": "bdde5933-400d-479c-9211-9bde3003ffe1"
    },
    {
      "id": 20,
      "principal_id": 50,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-01-05 20:03:43",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.58",
      "outcome": "Success",
      "request_id": "6163f1dc-1385-480f-a057-c03267e50acd"
    },
    {
      "id": 21,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-15 19:29:37",
      "operation": "compute.StartInstance",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.25",
      "outcome": "Success",
      "request_id": "ebeceb5f-50af-4405-9d60-d320d3ec7f90"
    },
    {
      "id": 22,
      "principal_id": 53,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-15 10:19:25",
      "operation": "storage.SetBucketPolicy",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.7",
      "outcome": "Success",
      "request_id": "48979c44-6ce3-4eee-bf0b-9483d5c231c7"
    },
    {
      "id": 23,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-04 06:36:11",
      "operation": "compute.DescribeInstances",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.227",
      "outcome": "Success",
      "request_id": "6d60124a-91b6-425b-91bf-c92c0a0a9118"
    },
    {
      "id": 24,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-17 20:20:16",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.187",
      "outcome": "Success",
      "request_id": "7b292087-0b4b-4977-848d-a97b43c1d31c"
    },
    {
      "id": 25,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-20 06:38:16",
      "operation": "compute.DeleteInstance",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.58",
      "outcome": "Success",
      "request_id": "7fa1a0b9-4703-429c-ae7a-dbcb9d474ac0"
    },
    {
      "id": 26,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-01-29 17:56:51",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "SDK",
      "source_ip": "192.0.2.157",
      "outcome": "Success",
      "request_id": "2a568d0b-81e2-400c-a0cd-4592e2465d18"
    },
    {
      "id": 27,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-10 08:20:29",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.103",
      "outcome": "Success",
      "request_id": "1387d924-7a79-4b42-ad5d-ff890b2decd7"
    },
    {
      "id": 28,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-01 08:48:29",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "192.0.2.166",
      "outcome": "Success",
      "request_id": "161eaa41-72b3-4a6f-a745-fcfaf0b590bf"
    },
    {
      "id": 29,
      "principal_id": 53,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-15 15:15:13",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "command line",
      "source_ip": "198.51.100.118",
      "outcome": "Success",
      "request_id": "9d57225b-8e47-4681-ac7b-f9d7920b2606"
    },
    {
      "id": 30,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-29 07:09:23",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "192.0.2.3",
      "outcome": "Success",
      "request_id": "c42ebf9e-a6ab-4cab-bd16-1d230cc76ff5"
    },
    {
      "id": 31,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-23 21:16:31",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.230",
      "outcome": "Success",
      "request_id": "3d1517d7-33b0-4137-8379-6983d3eb5188"
    },
    {
      "id": 32,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-10 20:47:48",
      "operation": "audit.StopLogging",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.130",
      "outcome": "Success",
      "request_id": "e039ec5f-7edc-4032-b31a-c497b007d725"
    },
    {
      "id": 33,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-04 16:15:17",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.98",
      "outcome": "Success",
      "request_id": "fe726436-15a9-4fbc-b923-0083bb13c6e2"
    },
    {
      "id": 34,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-17 09:20:52",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.239",
      "outcome": "Success",
      "request_id": "51128395-088b-4a23-a76e-b5a57479537d"
    },
    {
      "id": 35,
      "principal_id": 58,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-17 09:18:52",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.84",
      "outcome": "Success",
      "request_id": "cec2d391-af66-4e20-8863-3d52cb8eb618"
    },
    {
      "id": 36,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-12 05:16:14",
      "operation": "identity.AttachAdminPolicy",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "203.0.113.243",
      "outcome": "AccessDenied",
      "request_id": "fd05012f-3bde-4222-a21a-990be0a01d1b"
    },
    {
      "id": 37,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-12 12:02:48",
      "operation": "compute.StartInstance",
      "region": "global",
      "client": "command line",
      "source_ip": "203.0.113.176",
      "outcome": "Success",
      "request_id": "6275a2cb-1747-4cc2-a7a5-c3e77bbbc9aa"
    },
    {
      "id": 38,
      "principal_id": 4,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-17 04:05:56",
      "operation": "identity.CreateUser",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "192.0.2.129",
      "outcome": "AccessDenied",
      "request_id": "43fb7fa4-6701-4a11-a6ac-8837279fd6bd"
    },
    {
      "id": 39,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-11 09:01:56",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.160",
      "outcome": "Success",
      "request_id": "a6bf8698-d602-4c8a-a242-f3c69f7eb6ad"
    },
    {
      "id": 40,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-04 08:47:50",
      "operation": "compute.StartInstance",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.232",
      "outcome": "Success",
      "request_id": "26439da1-631e-4739-a889-212dff32469b"
    },
    {
      "id": 41,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-14 01:27:03",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.254",
      "outcome": "Success",
      "request_id": "43478a9b-6cbd-41af-9b31-a8217941bdea"
    },
    {
      "id": 42,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-11 22:06:02",
      "operation": "billing.GetCostReport",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "192.0.2.211",
      "outcome": "Success",
      "request_id": "abb230e1-ac4d-43ab-9cf1-77d6b6b82abc"
    },
    {
      "id": 43,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-16 17:48:26",
      "operation": "billing.GetCostReport",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "192.0.2.19",
      "outcome": "Success",
      "request_id": "9556e5ee-c2e7-4802-86ea-d76acec11636"
    },
    {
      "id": 44,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-03 06:07:17",
      "operation": "identity.CreateUser",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "203.0.113.119",
      "outcome": "Success",
      "request_id": "5252fc0e-b637-4bf1-8523-93f025bd9c76"
    },
    {
      "id": 45,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-19 16:44:14",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.174",
      "outcome": "Success",
      "request_id": "ae1aa29b-4474-4a29-b1da-eaccac576fd6"
    },
    {
      "id": 46,
      "principal_id": 33,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-20 04:13:08",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.34",
      "outcome": "Success",
      "request_id": "d6555cb5-3ad2-4936-b64a-e7a03d0ded31"
    },
    {
      "id": 47,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-01-26 19:51:44",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "203.0.113.251",
      "outcome": "Success",
      "request_id": "0a2f5a05-449f-4f74-b71d-098355f17d4d"
    },
    {
      "id": 48,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-01-27 20:11:39",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.204",
      "outcome": "Success",
      "request_id": "d1572841-80c0-47e7-b4f2-29c23e5f808e"
    },
    {
      "id": 49,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-14 15:58:57",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.4",
      "outcome": "Success",
      "request_id": "bd5cee29-b33f-4e9c-b19b-da881cbfc93e"
    },
    {
      "id": 50,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-16 14:58:45",
      "operation": "compute.StartInstance",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "203.0.113.132",
      "outcome": "AccessDenied",
      "request_id": "0e8383ea-1103-479a-8283-ed986f1951cf"
    },
    {
      "id": 51,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-25 15:11:58",
      "operation": "compute.StartInstance",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.153",
      "outcome": "Success",
      "request_id": "6d0812c1-44ab-4096-872b-6e81a30ba90a"
    },
    {
      "id": 52,
      "principal_id": 26,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-15 22:29:21",
      "operation": "storage.SetBucketPolicy",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "192.0.2.169",
      "outcome": "Success",
      "request_id": "fc453499-fde7-4390-9394-30f754fd5036"
    },
    {
      "id": 53,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-10 13:06:49",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.110",
      "outcome": "Success",
      "request_id": "5978e2c1-954f-488a-afd6-4df33422c974"
    },
    {
      "id": 54,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-06 19:01:55",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.123",
      "outcome": "Success",
      "request_id": "de59ccae-763b-401e-8536-2045e638f75f"
    },
    {
      "id": 55,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-26 22:33:24",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.62",
      "outcome": "Success",
      "request_id": "557f2d66-a7ad-40fd-8cec-541d7f946ff8"
    },
    {
      "id": 56,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-08 06:45:47",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.221",
      "outcome": "Success",
      "request_id": "3fc2c162-11e6-401a-a1db-173989b39786"
    },
    {
      "id": 57,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-14 09:06:22",
      "operation": "compute.DescribeInstances",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.4",
      "outcome": "Success",
      "request_id": "6b09f1d0-b990-4f06-a302-9e075108fe5e"
    },
    {
      "id": 58,
      "principal_id": 53,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-18 04:43:51",
      "operation": "keys.Decrypt",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "192.0.2.73",
      "outcome": "Success",
      "request_id": "4817ba35-6553-44bc-a9e0-10f1c2172fa3"
    },
    {
      "id": 59,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-04 08:49:47",
      "operation": "identity.AttachAdminPolicy",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.56",
      "outcome": "Success",
      "request_id": "6e123ba7-af86-45fe-b33b-194e1590b7e2"
    },
    {
      "id": 60,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-03-27 19:09:15",
      "operation": "keys.Decrypt",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "198.51.100.143",
      "outcome": "Success",
      "request_id": "abeaeeeb-8ff2-43b2-bc40-613d0364ffd6"
    },
    {
      "id": 61,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-10 17:24:26",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.148",
      "outcome": "Success",
      "request_id": "4dc491a2-7907-4765-b4c9-e04b8a14f307"
    },
    {
      "id": 62,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-10 19:16:29",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.239",
      "outcome": "AccessDenied",
      "request_id": "cf236371-33d8-478f-be3b-4777af5350a9"
    },
    {
      "id": 63,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-19 12:21:52",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.179",
      "outcome": "Success",
      "request_id": "49756066-e994-44f5-b5c3-d4bef265ebf5"
    },
    {
      "id": 64,
      "principal_id": 40,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-24 01:56:02",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "192.0.2.226",
      "outcome": "NotFound",
      "request_id": "de8e3a28-2a2a-4670-9fbc-92c6e9f0649b"
    },
    {
      "id": 65,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-14 18:51:13",
      "operation": "identity.ListRoles",
      "region": "us-2",
      "client": "web console",
      "source_ip": "192.0.2.124",
      "outcome": "Success",
      "request_id": "f9dd6fed-77cc-4e88-b00f-ec3e5ee20317"
    },
    {
      "id": 66,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-20 03:26:06",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.143",
      "outcome": "Success",
      "request_id": "103f5b9c-b180-479e-b814-a2e3b7e776c4"
    },
    {
      "id": 67,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-11 03:16:07",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.60",
      "outcome": "Success",
      "request_id": "5aef5dc6-40a0-4053-8429-54728b75693f"
    },
    {
      "id": 68,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-05-28 02:09:57",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.239",
      "outcome": "Success",
      "request_id": "83e84b43-97bc-4bcb-be87-7fa6eb807c24"
    },
    {
      "id": 69,
      "principal_id": 54,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-03-05 08:51:10",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.8",
      "outcome": "Success",
      "request_id": "2d33830b-68e2-4496-9e47-654e27f69b48"
    },
    {
      "id": 70,
      "principal_id": 8,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-02-25 22:44:42",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.100",
      "outcome": "AccessDenied",
      "request_id": "6083eea3-33ed-4cca-9122-355e475265ed"
    },
    {
      "id": 71,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-19 14:30:06",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.81",
      "outcome": "Success",
      "request_id": "3954bc65-452c-4271-801d-eafdf73fdc9f"
    },
    {
      "id": 72,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-05 14:54:51",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.93",
      "outcome": "Success",
      "request_id": "a61f21be-6c41-4409-84ea-92c9977a4c88"
    },
    {
      "id": 73,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-12 16:30:05",
      "operation": "keys.Decrypt",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.195",
      "outcome": "Success",
      "request_id": "80d6b03f-c19a-4616-a0a5-514f88c1a9f5"
    },
    {
      "id": 74,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-29 10:47:46",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "198.51.100.80",
      "outcome": "Success",
      "request_id": "6004876c-8b01-49d2-a31d-9e5c92449f53"
    },
    {
      "id": 75,
      "principal_id": 21,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-04-28 09:36:27",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.52",
      "outcome": "Success",
      "request_id": "35d3791f-402e-4c9f-8d19-4f623a25cf74"
    },
    {
      "id": 76,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-26 21:52:28",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.113",
      "outcome": "Success",
      "request_id": "7bab677d-1922-4cda-8dbe-1ed7e03d9b55"
    },
    {
      "id": 77,
      "principal_id": 8,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-02-26 01:00:13",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.89",
      "outcome": "Success",
      "request_id": "20abe439-99d6-4be7-b00e-a77e8c24f59a"
    },
    {
      "id": 78,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-03-29 11:51:16",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.172",
      "outcome": "Success",
      "request_id": "c57201da-3cf1-4629-9a4e-6b5424f9c279"
    },
    {
      "id": 79,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-22 02:22:52",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.135",
      "outcome": "Success",
      "request_id": "9ccfc551-5a68-46a5-a3cb-aea713aa6712"
    },
    {
      "id": 80,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-10 06:20:28",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "203.0.113.216",
      "outcome": "Success",
      "request_id": "394bd1ff-c2c6-49be-b7a0-297f05968675"
    },
    {
      "id": 81,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-21 07:08:33",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.173",
      "outcome": "Success",
      "request_id": "4fb4992a-74c2-475a-813e-ad7e29ff4ee5"
    },
    {
      "id": 82,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-22 03:11:52",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.11",
      "outcome": "Success",
      "request_id": "97715339-aaff-4e98-933f-9909ffa07b6f"
    },
    {
      "id": 83,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-06 06:31:09",
      "operation": "identity.AttachAdminPolicy",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.115",
      "outcome": "Success",
      "request_id": "3c33ec83-9aa0-4287-bf27-2987863ea611"
    },
    {
      "id": 84,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-24 14:59:21",
      "operation": "compute.StartInstance",
      "region": "us-2",
      "client": "command line",
      "source_ip": "203.0.113.117",
      "outcome": "Success",
      "request_id": "40e5f0aa-ba12-4ba3-b8c9-52216eb73886"
    },
    {
      "id": 85,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-25 11:25:57",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.125",
      "outcome": "AccessDenied",
      "request_id": "6e7fa5e8-631f-4ca7-ab1f-8153d773e684"
    },
    {
      "id": 86,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-14 00:29:11",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.223",
      "outcome": "Success",
      "request_id": "024ec776-251a-42ec-b5f0-a55f1bb6a8a8"
    },
    {
      "id": 87,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-14 04:51:10",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "198.51.100.11",
      "outcome": "Success",
      "request_id": "368118dd-f659-4e5b-b668-27df3e43d54f"
    },
    {
      "id": 88,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-11 02:51:26",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.227",
      "outcome": "Success",
      "request_id": "d1da32da-2b91-495b-8d96-a4adae3dc1db"
    },
    {
      "id": 89,
      "principal_id": 53,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-20 21:33:35",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.46",
      "outcome": "Success",
      "request_id": "1aacc845-7fef-4db0-a840-0d7d2fa9dd04"
    },
    {
      "id": 90,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-07 14:35:55",
      "operation": "identity.ListRoles",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "192.0.2.72",
      "outcome": "Success",
      "request_id": "e2502d12-9363-4f4e-86bf-8f06a263eccc"
    },
    {
      "id": 91,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-27 07:04:54",
      "operation": "storage.ListBuckets",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.92",
      "outcome": "Success",
      "request_id": "c749985d-892c-45b0-980e-5cccf45e246d"
    },
    {
      "id": 92,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-13 05:22:20",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.120",
      "outcome": "ValidationError",
      "request_id": "5750c3ed-a035-46a2-b824-0b7adca89113"
    },
    {
      "id": 93,
      "principal_id": 34,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-05 16:02:55",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.179",
      "outcome": "Success",
      "request_id": "38cc984d-10d4-4da1-aeb8-94338d415b20"
    },
    {
      "id": 94,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-20 19:03:53",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.29",
      "outcome": "Success",
      "request_id": "e7cf75c8-6248-487b-b61f-9b0e81fc6510"
    },
    {
      "id": 95,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-15 06:32:07",
      "operation": "storage.SetBucketPolicy",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "198.51.100.148",
      "outcome": "Success",
      "request_id": "5675b2bb-eebe-495a-99e7-15b3a02d45d2"
    },
    {
      "id": 96,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-22 06:16:12",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.44",
      "outcome": "Success",
      "request_id": "5a369994-3c9d-4501-ad81-173fc9126f59"
    },
    {
      "id": 97,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-16 14:16:34",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.136",
      "outcome": "Success",
      "request_id": "c7afb002-7111-428f-8710-60ce9b32c1bf"
    },
    {
      "id": 98,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-01-28 23:12:09",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.158",
      "outcome": "Success",
      "request_id": "f5b5622e-dcbe-43ac-9426-b2a8820af811"
    },
    {
      "id": 99,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-16 03:14:24",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.128",
      "outcome": "Success",
      "request_id": "0de9717e-377d-4452-bb55-0bcb2a813394"
    },
    {
      "id": 100,
      "principal_id": 21,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-04-28 22:56:00",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.135",
      "outcome": "Success",
      "request_id": "e52627fb-73de-45c5-8328-d7d590ac7013"
    },
    {
      "id": 101,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-13 10:06:54",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.163",
      "outcome": "Success",
      "request_id": "171118cf-96b5-449a-a611-d74e9e3bb0db"
    },
    {
      "id": 102,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-15 08:57:59",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.4",
      "outcome": "AccessDenied",
      "request_id": "b320ae02-5145-401f-81b7-76e206b36235"
    },
    {
      "id": 103,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-18 23:37:41",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "web console",
      "source_ip": "198.51.100.80",
      "outcome": "Success",
      "request_id": "a711b6c6-3e94-4863-a344-137b644f7127"
    },
    {
      "id": 104,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-27 09:18:41",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.142",
      "outcome": "Success",
      "request_id": "e3105072-c0e3-4359-8b67-fb5643d79740"
    },
    {
      "id": 105,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-01-31 09:34:39",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.166",
      "outcome": "Success",
      "request_id": "52b1a5a1-a77b-4437-9c67-b0e1a86e4d82"
    },
    {
      "id": 106,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-10 20:17:21",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.4",
      "outcome": "Success",
      "request_id": "3221bd5c-4bcb-4d04-94dc-8045e250e7a0"
    },
    {
      "id": 107,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-08 07:36:38",
      "operation": "keys.Decrypt",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.103",
      "outcome": "Success",
      "request_id": "3b356f09-2f5d-4308-91b6-8495267effb9"
    },
    {
      "id": 108,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-14 16:14:46",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.74",
      "outcome": "Success",
      "request_id": "53235514-d1bc-4989-824c-acd5a5f510ce"
    },
    {
      "id": 109,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-27 14:15:20",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.212",
      "outcome": "Success",
      "request_id": "5bd75001-f5de-4038-91f5-aa4e46b74422"
    },
    {
      "id": 110,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-08 18:57:44",
      "operation": "compute.StartInstance",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.228",
      "outcome": "AccessDenied",
      "request_id": "4454dd37-1f40-45f0-bde0-f3fed3fa88d1"
    },
    {
      "id": 111,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-23 03:50:39",
      "operation": "storage.PutObject",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "192.0.2.140",
      "outcome": "Success",
      "request_id": "34eab34b-6ee6-47df-bd01-17e4a5ddb88c"
    },
    {
      "id": 112,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-11 13:25:57",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "internal service",
      "source_ip": "198.51.100.225",
      "outcome": "Success",
      "request_id": "cd47e4fc-d49d-4346-b3ef-46e74755a1cf"
    },
    {
      "id": 113,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-27 16:28:58",
      "operation": "network.OpenIngressRule",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.87",
      "outcome": "ValidationError",
      "request_id": "eb1d8b4b-5134-4fe7-a5b0-73a73e7f3a00"
    },
    {
      "id": 114,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-23 15:09:52",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.221",
      "outcome": "AccessDenied",
      "request_id": "23e4cfe1-0a78-4501-a22a-a64180acc8c4"
    },
    {
      "id": 115,
      "principal_id": 53,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-22 15:37:05",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.59",
      "outcome": "Success",
      "request_id": "0a68f743-b83e-4723-812c-798628d9630d"
    },
    {
      "id": 116,
      "principal_id": 54,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-03-07 16:09:35",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.166",
      "outcome": "Success",
      "request_id": "47d67be0-b6cd-4633-a8b3-a56e4fdac8db"
    },
    {
      "id": 117,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-21 20:08:58",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.228",
      "outcome": "Success",
      "request_id": "b486f448-84aa-490a-90d0-d5f635e811a8"
    },
    {
      "id": 118,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-04 05:05:30",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.248",
      "outcome": "Success",
      "request_id": "2b46d365-b43a-446e-b6c3-1b4b3e22d70b"
    },
    {
      "id": 119,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-29 09:22:15",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.254",
      "outcome": "Success",
      "request_id": "be1e15bf-4514-48bf-b8cf-58479d6fcbb5"
    },
    {
      "id": 120,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-10 00:23:28",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.52",
      "outcome": "Success",
      "request_id": "9e4d88f8-b2ef-4590-a111-91a37f880116"
    },
    {
      "id": 121,
      "principal_id": 32,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-22 09:15:04",
      "operation": "network.OpenIngressRule",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.96",
      "outcome": "Success",
      "request_id": "32280fc2-c6e8-4980-92f9-4eddb981046d"
    },
    {
      "id": 122,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-15 21:53:44",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "203.0.113.82",
      "outcome": "Success",
      "request_id": "7334ef79-8aea-4660-815d-c36b576162f5"
    },
    {
      "id": 123,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-16 18:55:55",
      "operation": "identity.ListRoles",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "203.0.113.33",
      "outcome": "Success",
      "request_id": "3d306208-654f-4614-a3bd-8ed38d609d2d"
    },
    {
      "id": 124,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-07 00:31:14",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.1",
      "outcome": "AccessDenied",
      "request_id": "a9780899-acef-436d-bc02-10fd15789bcd"
    },
    {
      "id": 125,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-16 12:09:28",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.3",
      "outcome": "Throttled",
      "request_id": "abb0678d-35fa-464f-aaa2-0eae43056cca"
    },
    {
      "id": 126,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-01-25 21:23:09",
      "operation": "network.OpenIngressRule",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "203.0.113.104",
      "outcome": "Success",
      "request_id": "578e1f61-c482-48b4-93e4-9623a803026a"
    },
    {
      "id": 127,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-01 15:28:41",
      "operation": "audit.StopLogging",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.206",
      "outcome": "Success",
      "request_id": "9b740a7f-1cb9-4153-aeef-3a2f835396dd"
    },
    {
      "id": 128,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-01 07:19:26",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.91",
      "outcome": "Success",
      "request_id": "9b819c70-bc3b-4db5-be28-04d1f5e0b257"
    },
    {
      "id": 129,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-24 10:35:22",
      "operation": "compute.StartInstance",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.171",
      "outcome": "Success",
      "request_id": "2b6865ed-db72-4b27-89eb-1ebad0846bac"
    },
    {
      "id": 130,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-17 16:01:41",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.15",
      "outcome": "Success",
      "request_id": "15a85fb8-24b4-4f00-838e-d41c7fc0c05f"
    },
    {
      "id": 131,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-24 14:33:09",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.90",
      "outcome": "Success",
      "request_id": "20d4254a-2791-49e0-8999-779f0430f16f"
    },
    {
      "id": 132,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-13 17:25:41",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.37",
      "outcome": "Success",
      "request_id": "a280594f-3403-4987-aece-42c4d21f6809"
    },
    {
      "id": 133,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-03 09:03:49",
      "operation": "identity.ListRoles",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "198.51.100.252",
      "outcome": "Success",
      "request_id": "5742c303-cfa0-4632-852d-a5d9007d296e"
    },
    {
      "id": 134,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-09 01:04:07",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.66",
      "outcome": "Success",
      "request_id": "361f5c76-1c16-4c08-bf8f-c15a6382f9ec"
    },
    {
      "id": 135,
      "principal_id": 16,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-18 07:35:59",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.249",
      "outcome": "Success",
      "request_id": "18cc45b1-99fe-4978-91a8-4919273d4960"
    },
    {
      "id": 136,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-30 22:25:01",
      "operation": "keys.Decrypt",
      "region": "us-2",
      "client": "command line",
      "source_ip": "192.0.2.33",
      "outcome": "Success",
      "request_id": "4d082481-19d9-4924-bf90-3285fdb0faad"
    },
    {
      "id": 137,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-16 19:25:02",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.239",
      "outcome": "Success",
      "request_id": "1c96b096-3aa6-433b-9de2-8a69d7cd4cfa"
    },
    {
      "id": 138,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-23 08:17:47",
      "operation": "identity.CreateUser",
      "region": "eu-2",
      "client": "internal service",
      "source_ip": "203.0.113.203",
      "outcome": "Success",
      "request_id": "ddb5842d-e669-401e-ac27-22136ec8c0b1"
    },
    {
      "id": 139,
      "principal_id": 19,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-17 07:36:44",
      "operation": "audit.DeleteTrail",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.102",
      "outcome": "AccessDenied",
      "request_id": "6119db07-122f-4002-b806-ff1e3eff8c8f"
    },
    {
      "id": 140,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-23 07:42:18",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.136",
      "outcome": "Success",
      "request_id": "edb7a3ec-cf9e-49d1-b59a-dc49ae5816cd"
    },
    {
      "id": 141,
      "principal_id": 60,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-23 16:15:53",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.206",
      "outcome": "Success",
      "request_id": "5a0543d9-cd31-43e0-9dbe-651468fb7a70"
    },
    {
      "id": 142,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-17 00:11:50",
      "operation": "storage.ListBuckets",
      "region": "us-2",
      "client": "web console",
      "source_ip": "192.0.2.225",
      "outcome": "NotFound",
      "request_id": "85964a34-3344-4392-8995-207fa7102184"
    },
    {
      "id": 143,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-09 17:14:55",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.118",
      "outcome": "AccessDenied",
      "request_id": "c71c9adc-76e2-4f76-bfcd-4ce236594e11"
    },
    {
      "id": 144,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-26 19:54:16",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "192.0.2.233",
      "outcome": "Success",
      "request_id": "444db1d1-9f19-4b45-91b7-c5c39319f115"
    },
    {
      "id": 145,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-02 22:37:29",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.124",
      "outcome": "Success",
      "request_id": "e5a07b70-27a3-4c61-a1e8-d6e06f41ab51"
    },
    {
      "id": 146,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-01 23:24:57",
      "operation": "compute.DescribeInstances",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.36",
      "outcome": "Success",
      "request_id": "9ef8f657-fb10-45ba-804f-8e1025838f0d"
    },
    {
      "id": 147,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-28 20:51:50",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.46",
      "outcome": "Success",
      "request_id": "a19439c7-fdf6-4565-8b34-3caa27a331c2"
    },
    {
      "id": 148,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-16 19:08:41",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.44",
      "outcome": "Success",
      "request_id": "58f0b05d-73a3-48d9-af0e-697b06b55c41"
    },
    {
      "id": 149,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-27 12:36:54",
      "operation": "identity.ListRoles",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "198.51.100.158",
      "outcome": "Success",
      "request_id": "bf031805-8e6b-4093-a257-8ca09ab50d9b"
    },
    {
      "id": 150,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-17 13:47:39",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.89",
      "outcome": "Success",
      "request_id": "4e9112d7-6b27-4f0a-93b4-ee980d284cef"
    },
    {
      "id": 151,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-16 13:52:32",
      "operation": "identity.CreateUser",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "192.0.2.195",
      "outcome": "Success",
      "request_id": "68959bef-2665-4e63-a848-015840ece28d"
    },
    {
      "id": 152,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-26 21:02:04",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "203.0.113.172",
      "outcome": "Success",
      "request_id": "97fb9591-928f-4081-b2b4-9712955862ea"
    },
    {
      "id": 153,
      "principal_id": 60,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-26 02:46:41",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.126",
      "outcome": "Success",
      "request_id": "c9096e1d-a8f5-4dd6-8ddb-39d78ad7bf19"
    },
    {
      "id": 154,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-16 12:11:04",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.137",
      "outcome": "Success",
      "request_id": "92366211-f9c2-43be-bcce-d36386ffaa22"
    },
    {
      "id": 155,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-03 03:32:06",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.108",
      "outcome": "Success",
      "request_id": "181fee1f-52a1-4898-90b1-415bba0583a2"
    },
    {
      "id": 156,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-17 02:21:11",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.191",
      "outcome": "Throttled",
      "request_id": "f051214b-8bdc-450a-9b15-4b29304f4d49"
    },
    {
      "id": 157,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-04 18:37:14",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "command line",
      "source_ip": "192.0.2.197",
      "outcome": "Success",
      "request_id": "8acda732-bc83-468d-8117-eb22b70f394b"
    },
    {
      "id": 158,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-17 14:09:04",
      "operation": "compute.StartInstance",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.78",
      "outcome": "Success",
      "request_id": "29a6366f-7c34-4738-9e7f-b3ed4c2931d4"
    },
    {
      "id": 159,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-18 03:27:56",
      "operation": "audit.DeleteTrail",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.216",
      "outcome": "Success",
      "request_id": "2cdebdf8-fb7d-4805-9eb9-a51421997328"
    },
    {
      "id": 160,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-05-30 22:18:55",
      "operation": "keys.Decrypt",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "198.51.100.12",
      "outcome": "Throttled",
      "request_id": "0504c42a-75d0-4d7b-928f-e69b612d3308"
    },
    {
      "id": 161,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-07 17:34:21",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.200",
      "outcome": "Success",
      "request_id": "4e7f132d-1e53-44ee-8fc9-ffd2731d489c"
    },
    {
      "id": 162,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-04 08:35:58",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.237",
      "outcome": "Success",
      "request_id": "c80a4cd8-934a-4b5c-813e-f92bb4fdd716"
    },
    {
      "id": 163,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-16 15:00:07",
      "operation": "storage.SetBucketPolicy",
      "region": "global",
      "client": "command line",
      "source_ip": "203.0.113.208",
      "outcome": "Success",
      "request_id": "157bbc2a-df9e-4c2e-af6d-8ba6de9c7b4c"
    },
    {
      "id": 164,
      "principal_id": 22,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-13 13:29:56",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.69",
      "outcome": "Success",
      "request_id": "a22cf590-2c8e-4fdd-a2a8-441de979af02"
    },
    {
      "id": 165,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-17 21:20:58",
      "operation": "billing.GetCostReport",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "192.0.2.126",
      "outcome": "Success",
      "request_id": "6eb4f9b0-04a9-427c-aa22-8dc14ba3030e"
    },
    {
      "id": 166,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-20 07:26:00",
      "operation": "billing.GetCostReport",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "198.51.100.112",
      "outcome": "Success",
      "request_id": "96d834f3-9a3d-4fd6-8c52-8d74ae679ba5"
    },
    {
      "id": 167,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-19 03:10:47",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.188",
      "outcome": "Success",
      "request_id": "f1749dc7-4bcb-4432-9529-2242ad0bb560"
    },
    {
      "id": 168,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-30 09:36:50",
      "operation": "compute.DescribeInstances",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "203.0.113.225",
      "outcome": "Success",
      "request_id": "1d053fd8-d1de-4584-8016-198c65471aaf"
    },
    {
      "id": 169,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-10 16:02:11",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "192.0.2.6",
      "outcome": "Success",
      "request_id": "98f01b09-b4d5-4e09-9d84-025015e71c05"
    },
    {
      "id": 170,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-29 17:58:22",
      "operation": "identity.CreateUser",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.29",
      "outcome": "Success",
      "request_id": "365714af-33ee-45b5-a1b2-1d09a7d635b9"
    },
    {
      "id": 171,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-18 13:30:51",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.244",
      "outcome": "Success",
      "request_id": "0426aa04-f32b-4935-9628-c06507874969"
    },
    {
      "id": 172,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-18 06:33:19",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "203.0.113.13",
      "outcome": "Success",
      "request_id": "f06805b1-6521-4f49-bb33-8b8228fbf20b"
    },
    {
      "id": 173,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-19 10:51:45",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.202",
      "outcome": "Success",
      "request_id": "f06e53b7-954c-4050-a270-dba7c28b9cd7"
    },
    {
      "id": 174,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-30 13:32:53",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.249",
      "outcome": "Success",
      "request_id": "d4fbbc5a-9085-45c2-a4c3-854efaeae478"
    },
    {
      "id": 175,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-21 06:02:47",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "SDK",
      "source_ip": "198.51.100.11",
      "outcome": "Success",
      "request_id": "fe291682-7876-4f3a-ae26-63c8a9a920a5"
    },
    {
      "id": 176,
      "principal_id": 2,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-03-05 04:53:32",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.218",
      "outcome": "Success",
      "request_id": "fe5fa641-b078-4401-a756-847fc07224f3"
    },
    {
      "id": 177,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-01-27 18:03:04",
      "operation": "compute.StartInstance",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.146",
      "outcome": "Success",
      "request_id": "43ca5bdf-0ab0-43d3-9721-6fac2d54ddf8"
    },
    {
      "id": 178,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-25 16:00:39",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.190",
      "outcome": "Success",
      "request_id": "43adb195-677e-4e9b-9e73-0f3bf6f576c5"
    },
    {
      "id": 179,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-26 12:18:13",
      "operation": "compute.StartInstance",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "203.0.113.253",
      "outcome": "Success",
      "request_id": "f986dc73-5866-40a6-8fa0-3136695b616b"
    },
    {
      "id": 180,
      "principal_id": 35,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-12 02:17:00",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.70",
      "outcome": "Success",
      "request_id": "921b2eb0-ec25-4440-bb42-beff34eda468"
    },
    {
      "id": 181,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-02 00:29:33",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.60",
      "outcome": "Success",
      "request_id": "83a0bdff-53ca-423b-83c6-f24fdb32cf3e"
    },
    {
      "id": 182,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-21 03:00:22",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.170",
      "outcome": "Success",
      "request_id": "12122e53-deb7-4c2b-a961-da39ce6a2509"
    },
    {
      "id": 183,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-27 14:58:24",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "SDK",
      "source_ip": "198.51.100.50",
      "outcome": "Success",
      "request_id": "07def8f3-e212-4bf5-b72f-b0573f56b69e"
    },
    {
      "id": 184,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-04 19:51:02",
      "operation": "identity.CreateAccessKey",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.22",
      "outcome": "Success",
      "request_id": "41b5fbca-0a8f-4f0c-a120-053a35029f6e"
    },
    {
      "id": 185,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-23 00:17:46",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.139",
      "outcome": "Success",
      "request_id": "18b960c7-ce5f-442d-9e05-8125b8f77819"
    },
    {
      "id": 186,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-06-01 04:47:28",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.205",
      "outcome": "Success",
      "request_id": "820fb15f-d9b6-4c2b-9ef9-f693782654cb"
    },
    {
      "id": 187,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-31 14:10:07",
      "operation": "storage.ListBuckets",
      "region": "global",
      "client": "command line",
      "source_ip": "203.0.113.35",
      "outcome": "Success",
      "request_id": "125ab71c-15c3-48cd-8b6c-d7c70b5353ca"
    },
    {
      "id": 188,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-02 05:08:51",
      "operation": "audit.StopLogging",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.21",
      "outcome": "AccessDenied",
      "request_id": "809f2bdf-74a7-47fe-8b37-e621bad06f64"
    },
    {
      "id": 189,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-04 12:08:49",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.145",
      "outcome": "Success",
      "request_id": "300c465d-1f01-41be-90fc-efd2bde796d6"
    },
    {
      "id": 190,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-23 11:01:47",
      "operation": "storage.PutObject",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "198.51.100.113",
      "outcome": "Success",
      "request_id": "cb297846-c288-426b-a3c9-00c6a181e5b5"
    },
    {
      "id": 191,
      "principal_id": 49,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-05-23 17:47:12",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.106",
      "outcome": "Success",
      "request_id": "0c7c8a78-748d-4924-b064-6771060231dd"
    },
    {
      "id": 192,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-06-03 03:58:04",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "192.0.2.41",
      "outcome": "Success",
      "request_id": "91cb392d-062a-4e9c-afa8-1f2faa76ff84"
    },
    {
      "id": 193,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-31 03:10:11",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "internal service",
      "source_ip": "198.51.100.56",
      "outcome": "Success",
      "request_id": "803d8cfa-f92a-4f97-aa08-87d05bd8e4ab"
    },
    {
      "id": 194,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-15 22:33:52",
      "operation": "audit.StopLogging",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.23",
      "outcome": "ValidationError",
      "request_id": "017ba8f3-557a-47c2-a57d-059e540be9ef"
    },
    {
      "id": 195,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-11 11:48:29",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.226",
      "outcome": "Success",
      "request_id": "49066c20-c272-4992-a90e-57ff0af01298"
    },
    {
      "id": 196,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-26 02:41:23",
      "operation": "compute.StartInstance",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.147",
      "outcome": "Success",
      "request_id": "f3a8b24c-a905-4a95-b202-365ec2fc54a5"
    },
    {
      "id": 197,
      "principal_id": 35,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-14 06:42:53",
      "operation": "storage.SetBucketPolicy",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.51",
      "outcome": "Throttled",
      "request_id": "77c8beb3-bfa1-4646-804f-934a3bc8fce9"
    },
    {
      "id": 198,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-27 00:09:16",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.202",
      "outcome": "Success",
      "request_id": "d223288d-d846-4026-8818-a837887be3ab"
    },
    {
      "id": 199,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-06 22:27:37",
      "operation": "compute.StartInstance",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "203.0.113.149",
      "outcome": "Success",
      "request_id": "f1faf857-3d8f-477f-bdea-45216308f62c"
    },
    {
      "id": 200,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-16 23:28:08",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.185",
      "outcome": "Success",
      "request_id": "5c61970b-39e4-458a-ac8b-b21001b0d4b1"
    },
    {
      "id": 201,
      "principal_id": 37,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-01-23 13:04:45",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.50",
      "outcome": "Success",
      "request_id": "c6f7e1ab-f62b-4413-b16d-abb946c44811"
    },
    {
      "id": 202,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-07 11:25:30",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.239",
      "outcome": "Success",
      "request_id": "3b3a7689-e9ff-4180-a019-e14bc9092bdd"
    },
    {
      "id": 203,
      "principal_id": 33,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-20 17:05:31",
      "operation": "identity.CreateAccessKey",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "203.0.113.210",
      "outcome": "Success",
      "request_id": "93927ef9-753c-489e-9219-cd00725fb59d"
    },
    {
      "id": 204,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-08 04:14:21",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.225",
      "outcome": "Success",
      "request_id": "a82c6666-9ef3-4c6b-a741-0403e1dae030"
    },
    {
      "id": 205,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-19 22:26:18",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.182",
      "outcome": "NotFound",
      "request_id": "dcae8198-d6f4-44bb-91f4-871b454f3b7b"
    },
    {
      "id": 206,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-05 22:51:55",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.44",
      "outcome": "Success",
      "request_id": "5224169c-06cf-41b6-8223-01299b249622"
    },
    {
      "id": 207,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-25 23:19:15",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.45",
      "outcome": "Success",
      "request_id": "ce777fd2-903e-41b2-accd-a2d544514931"
    },
    {
      "id": 208,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-11 00:40:36",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.154",
      "outcome": "AccessDenied",
      "request_id": "93e476cc-5143-4c75-bb26-733229136582"
    },
    {
      "id": 209,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-03 13:10:31",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.203",
      "outcome": "Success",
      "request_id": "6c5d987c-2d98-4093-abc3-3906c3e63931"
    },
    {
      "id": 210,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-22 13:41:56",
      "operation": "keys.Decrypt",
      "region": "global",
      "client": "internal service",
      "source_ip": "203.0.113.204",
      "outcome": "Success",
      "request_id": "5dc9cdbe-007e-43fc-9a22-42c98c885e90"
    },
    {
      "id": 211,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-27 00:49:24",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.81",
      "outcome": "Success",
      "request_id": "74e29511-f7ca-405a-96fe-1162403a2361"
    },
    {
      "id": 212,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-04 22:43:53",
      "operation": "identity.CreateAccessKey",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.58",
      "outcome": "Success",
      "request_id": "7c43a563-9b0e-4f12-9cf5-c36895faa651"
    },
    {
      "id": 213,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-29 22:57:40",
      "operation": "storage.SetBucketPolicy",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.94",
      "outcome": "Success",
      "request_id": "76e0db87-42cc-4077-8763-c4f7921d28fb"
    },
    {
      "id": 214,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-24 15:13:55",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "web console",
      "source_ip": "203.0.113.79",
      "outcome": "Success",
      "request_id": "365cff3b-6a00-47f2-83b3-2f3cea8d7b6f"
    },
    {
      "id": 215,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-01 21:42:09",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.230",
      "outcome": "AccessDenied",
      "request_id": "41bdd40a-40de-4520-b840-63cbbc052262"
    },
    {
      "id": 216,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-07 20:59:56",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.222",
      "outcome": "ValidationError",
      "request_id": "2d3f5646-1545-40a1-8ac7-2173b9692bfe"
    },
    {
      "id": 217,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-19 19:35:32",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "command line",
      "source_ip": "192.0.2.35",
      "outcome": "Success",
      "request_id": "0ab22aa5-4c02-49fa-a832-4efed8d82ab5"
    },
    {
      "id": 218,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-20 09:29:48",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "198.51.100.234",
      "outcome": "Success",
      "request_id": "267f26df-3ebb-49de-b223-51d0f4b87f8e"
    },
    {
      "id": 219,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-06-05 19:32:58",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.247",
      "outcome": "Success",
      "request_id": "e166c27c-198e-41c3-95dd-52d64efc2561"
    },
    {
      "id": 220,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-01-29 06:39:12",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.213",
      "outcome": "Success",
      "request_id": "7736fc78-0d72-4356-aec3-578a7563f3f0"
    },
    {
      "id": 221,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-18 00:50:00",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.219",
      "outcome": "Success",
      "request_id": "d47c6a3c-e034-4b42-b8ee-aacb8a75732b"
    },
    {
      "id": 222,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-22 05:22:06",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.147",
      "outcome": "Success",
      "request_id": "0254ba5b-cd14-462b-a21f-26c6f5da9359"
    },
    {
      "id": 223,
      "principal_id": 32,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-23 21:05:22",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.138",
      "outcome": "Success",
      "request_id": "b88a05bc-e079-41a5-941c-b35eb5d904a4"
    },
    {
      "id": 224,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-31 06:10:13",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "192.0.2.164",
      "outcome": "Success",
      "request_id": "a20d002a-af27-4abb-92df-34d4c5d95ecd"
    },
    {
      "id": 225,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-20 13:27:48",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "203.0.113.217",
      "outcome": "Success",
      "request_id": "a987c4f3-7f85-426d-b9f7-7d7063d247ee"
    },
    {
      "id": 226,
      "principal_id": 2,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-03-06 17:03:00",
      "operation": "compute.StartInstance",
      "region": "us-1",
      "client": "web console",
      "source_ip": "192.0.2.215",
      "outcome": "Throttled",
      "request_id": "118f3e29-13df-422b-8eb6-4db78a3e060c"
    },
    {
      "id": 227,
      "principal_id": 53,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-23 09:23:00",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "internal service",
      "source_ip": "198.51.100.27",
      "outcome": "AccessDenied",
      "request_id": "04637fd5-caff-4bb0-a334-6ee62c2b4330"
    },
    {
      "id": 228,
      "principal_id": 2,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-03-08 03:58:41",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.113",
      "outcome": "Success",
      "request_id": "eb485fb0-5458-4f3b-b7c9-964e99be3ba7"
    },
    {
      "id": 229,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-08 15:19:33",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.104",
      "outcome": "Success",
      "request_id": "eb12e1de-f3d3-4c87-bfee-b604052af17a"
    },
    {
      "id": 230,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-09 16:45:43",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.42",
      "outcome": "Success",
      "request_id": "33bce793-abdf-490c-970a-cf26a55d3bfe"
    },
    {
      "id": 231,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-29 14:32:42",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.62",
      "outcome": "Success",
      "request_id": "ddfeaa02-233e-4e9e-a413-968a874c71fa"
    },
    {
      "id": 232,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-18 13:34:47",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.109",
      "outcome": "Success",
      "request_id": "81bc2392-6547-4eac-81b5-2b64d0964071"
    },
    {
      "id": 233,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-20 12:17:47",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "web console",
      "source_ip": "198.51.100.16",
      "outcome": "Success",
      "request_id": "8ed098d9-bf52-4ada-a091-30e6b8a9e782"
    },
    {
      "id": 234,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-06 06:00:30",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.85",
      "outcome": "Success",
      "request_id": "1609c1bf-e8e2-4895-b6d6-1e74f1a7995d"
    },
    {
      "id": 235,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-08 09:41:31",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.114",
      "outcome": "Success",
      "request_id": "728c7970-7103-424b-ba42-1268a90cd278"
    },
    {
      "id": 236,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-11 12:35:40",
      "operation": "compute.StartInstance",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "203.0.113.114",
      "outcome": "Success",
      "request_id": "46ba2f5f-62d6-4202-a0dc-467c9c9a0d60"
    },
    {
      "id": 237,
      "principal_id": 37,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-01-23 18:02:56",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "203.0.113.114",
      "outcome": "Success",
      "request_id": "1b45257e-4859-4b47-a60c-362b98df0d2e"
    },
    {
      "id": 238,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-06 07:38:55",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "192.0.2.248",
      "outcome": "Success",
      "request_id": "dcebe11c-dfb5-43a9-9608-ec7a8c626e0e"
    },
    {
      "id": 239,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-17 03:30:03",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.251",
      "outcome": "Success",
      "request_id": "05a38293-0a9f-407f-87dc-fb6683137666"
    },
    {
      "id": 240,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-09 21:19:32",
      "operation": "identity.AttachAdminPolicy",
      "region": "global",
      "client": "command line",
      "source_ip": "203.0.113.216",
      "outcome": "AccessDenied",
      "request_id": "facff82d-5c76-4b08-86de-938e0c6781c1"
    },
    {
      "id": 241,
      "principal_id": 45,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-09 20:17:29",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.216",
      "outcome": "Success",
      "request_id": "1088e6b7-6adf-40c1-b985-24d1df52864f"
    },
    {
      "id": 242,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-24 17:23:30",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "internal service",
      "source_ip": "198.51.100.9",
      "outcome": "Success",
      "request_id": "5db5af73-e18f-4cc3-9c70-20336ea90475"
    },
    {
      "id": 243,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-04-01 18:49:52",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.63",
      "outcome": "Success",
      "request_id": "34dc648d-146a-42db-8d4b-8e010a0405c2"
    },
    {
      "id": 244,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-11 20:21:22",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.253",
      "outcome": "Throttled",
      "request_id": "0d13e040-229e-4032-93f7-90085a3c3b90"
    },
    {
      "id": 245,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-20 10:55:56",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.183",
      "outcome": "Success",
      "request_id": "dd7a3d52-b9d9-4c75-89bf-bd8d41567187"
    },
    {
      "id": 246,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-12 06:58:26",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.99",
      "outcome": "Success",
      "request_id": "10705942-33af-4762-8df7-20bec4e16310"
    },
    {
      "id": 247,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-07 07:41:14",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "198.51.100.236",
      "outcome": "Success",
      "request_id": "3c821398-fd35-4940-b0fa-dec2e46389f9"
    },
    {
      "id": 248,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-22 23:22:25",
      "operation": "identity.CreateAccessKey",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "198.51.100.118",
      "outcome": "Success",
      "request_id": "4aed645e-af40-4632-8da5-631708d8a444"
    },
    {
      "id": 249,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-18 09:11:47",
      "operation": "network.OpenIngressRule",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "192.0.2.204",
      "outcome": "Success",
      "request_id": "858b69bb-15b4-494e-86d3-d2b84d450b79"
    },
    {
      "id": 250,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-08 01:04:44",
      "operation": "keys.Decrypt",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "203.0.113.98",
      "outcome": "Success",
      "request_id": "d0eb9be5-2aeb-4e5c-8bed-c93c43d4981f"
    },
    {
      "id": 251,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-18 14:11:55",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.173",
      "outcome": "AccessDenied",
      "request_id": "d09648fb-7320-4183-a0eb-4f0119321271"
    },
    {
      "id": 252,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-08 11:15:19",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.145",
      "outcome": "AccessDenied",
      "request_id": "ca461740-cf03-4763-8ba1-bea939f4b2d2"
    },
    {
      "id": 253,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-24 12:50:03",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.169",
      "outcome": "Success",
      "request_id": "6dd578aa-89f2-4113-9291-2eae3e2f479b"
    },
    {
      "id": 254,
      "principal_id": 58,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-18 06:41:13",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.90",
      "outcome": "Success",
      "request_id": "6efd3bdf-d575-4c50-8226-f6cb621c71f4"
    },
    {
      "id": 255,
      "principal_id": 17,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-05-07 23:30:58",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "SDK",
      "source_ip": "198.51.100.3",
      "outcome": "ValidationError",
      "request_id": "ec3e0dff-c551-4a5c-8c2f-43673897b27b"
    },
    {
      "id": 256,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-20 08:23:37",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.205",
      "outcome": "Success",
      "request_id": "6d88d80e-bce3-49ed-a3fb-4ade0534615f"
    },
    {
      "id": 257,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-18 12:07:21",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.125",
      "outcome": "Success",
      "request_id": "dddddd2f-6898-4efc-b7f1-80b1a9412793"
    },
    {
      "id": 258,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-27 13:02:31",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.113",
      "outcome": "Success",
      "request_id": "cf5cb45f-5a7a-49dd-85c2-51356d509394"
    },
    {
      "id": 259,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-12 01:13:40",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.211",
      "outcome": "Success",
      "request_id": "91fdc22f-ebd1-4585-811c-497866f42460"
    },
    {
      "id": 260,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-01-31 03:16:25",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.142",
      "outcome": "Success",
      "request_id": "628baad4-f82e-4c64-b1ae-4cd89a963614"
    },
    {
      "id": 261,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-04 13:41:10",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "203.0.113.227",
      "outcome": "Success",
      "request_id": "72259623-b1b7-46d5-bcfa-fd61be833958"
    },
    {
      "id": 262,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-27 10:42:04",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.102",
      "outcome": "Success",
      "request_id": "1496941b-d706-4cf7-a801-61d5d459152d"
    },
    {
      "id": 263,
      "principal_id": 17,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-05-10 02:58:57",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.209",
      "outcome": "Success",
      "request_id": "3e3d40fe-6895-4c2c-ab9c-14c4282809c3"
    },
    {
      "id": 264,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-04-02 16:34:21",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.85",
      "outcome": "Success",
      "request_id": "5211bf59-7e4a-4716-b7fb-83f5b37206df"
    },
    {
      "id": 265,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-12 13:06:52",
      "operation": "identity.CreateAccessKey",
      "region": "global",
      "client": "internal service",
      "source_ip": "203.0.113.139",
      "outcome": "Success",
      "request_id": "1bf9b64a-d6ed-414b-b713-8f74bd61b066"
    },
    {
      "id": 266,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-24 11:08:43",
      "operation": "storage.PutObject",
      "region": "us-2",
      "client": "web console",
      "source_ip": "192.0.2.138",
      "outcome": "Success",
      "request_id": "acbd156c-1894-43a5-ae26-8a2ae4ce161a"
    },
    {
      "id": 267,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-05 22:47:33",
      "operation": "identity.CreateAccessKey",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "192.0.2.5",
      "outcome": "Success",
      "request_id": "b5b74547-ab76-4a77-a235-05b3115f0306"
    },
    {
      "id": 268,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-26 19:26:12",
      "operation": "identity.ListRoles",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.24",
      "outcome": "Success",
      "request_id": "d736de53-80d9-4035-9d62-e480d6ac532a"
    },
    {
      "id": 269,
      "principal_id": 17,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-05-11 00:29:45",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.109",
      "outcome": "Success",
      "request_id": "002760fb-afc2-41ce-bc53-1c90de1dccf3"
    },
    {
      "id": 270,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-04 20:16:45",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.32",
      "outcome": "Success",
      "request_id": "cb9b7d46-2436-49da-ade3-0ead03a003bf"
    },
    {
      "id": 271,
      "principal_id": 19,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-18 20:37:01",
      "operation": "identity.CreateAccessKey",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "203.0.113.4",
      "outcome": "Success",
      "request_id": "385b301c-0e8d-4916-b1cb-a5e9bf704582"
    },
    {
      "id": 272,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-09 20:16:39",
      "operation": "identity.CreateUser",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "198.51.100.139",
      "outcome": "Success",
      "request_id": "0702f1a6-8f29-4826-bcab-8c1fec96e7d6"
    },
    {
      "id": 273,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-19 03:27:10",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "192.0.2.227",
      "outcome": "Throttled",
      "request_id": "969ab734-b365-4ade-86ca-7ad08484f3a1"
    },
    {
      "id": 274,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-06 05:01:11",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.120",
      "outcome": "ValidationError",
      "request_id": "5db13879-ef36-4f01-bb71-cfab9d745735"
    },
    {
      "id": 275,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-24 17:52:27",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.32",
      "outcome": "Success",
      "request_id": "523b1d07-6040-450a-b11a-c48d2fc2556c"
    },
    {
      "id": 276,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-28 09:42:05",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "192.0.2.64",
      "outcome": "Success",
      "request_id": "9422c65a-0fcf-4e27-9271-0a53461c1e6a"
    },
    {
      "id": 277,
      "principal_id": 50,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-01-06 05:08:54",
      "operation": "identity.CreateAccessKey",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.18",
      "outcome": "Success",
      "request_id": "618ef003-92e9-49b9-830d-30ecd388ff9a"
    },
    {
      "id": 278,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-26 08:46:59",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "203.0.113.246",
      "outcome": "Success",
      "request_id": "c0d22b5f-6998-4904-a56f-d46e03975a13"
    },
    {
      "id": 279,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-21 10:07:12",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.107",
      "outcome": "Success",
      "request_id": "1ac20ef6-fddd-4530-bb19-ce92233380bb"
    },
    {
      "id": 280,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-02 18:44:02",
      "operation": "storage.ListBuckets",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.69",
      "outcome": "Success",
      "request_id": "edd9f420-e66b-4648-8a57-d395986a4a3f"
    },
    {
      "id": 281,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-29 14:35:44",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "web console",
      "source_ip": "203.0.113.100",
      "outcome": "AccessDenied",
      "request_id": "dc26d5b0-bdc3-4afe-9852-26738ca01868"
    },
    {
      "id": 282,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-21 01:46:37",
      "operation": "audit.StopLogging",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.103",
      "outcome": "Success",
      "request_id": "1386a277-e025-4491-97f2-d31f3cbc2397"
    },
    {
      "id": 283,
      "principal_id": 21,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-04-29 00:34:19",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.56",
      "outcome": "Success",
      "request_id": "cb3eec3b-ffc0-4e4a-b82b-07c123e02545"
    },
    {
      "id": 284,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-28 03:16:39",
      "operation": "identity.ListRoles",
      "region": "us-2",
      "client": "web console",
      "source_ip": "198.51.100.22",
      "outcome": "Success",
      "request_id": "96a83ebe-e28c-4484-adac-951dbd1628ab"
    },
    {
      "id": 285,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-04 09:08:39",
      "operation": "identity.CreateUser",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "203.0.113.136",
      "outcome": "AccessDenied",
      "request_id": "e575b7fa-811a-4555-a36e-d50ab1ae5f27"
    },
    {
      "id": 286,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-15 02:10:20",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.235",
      "outcome": "Success",
      "request_id": "1b725136-5d46-4f37-8cb4-e875f591c76a"
    },
    {
      "id": 287,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-12 12:30:04",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.179",
      "outcome": "Success",
      "request_id": "cf6f5c9a-c908-4120-bd7b-e51bac9fee23"
    },
    {
      "id": 288,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-25 07:40:31",
      "operation": "compute.StartInstance",
      "region": "us-2",
      "client": "command line",
      "source_ip": "192.0.2.55",
      "outcome": "Success",
      "request_id": "f1fa1d11-4093-4ac5-aacb-7f6ef1496f11"
    },
    {
      "id": 289,
      "principal_id": 48,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-01-27 21:28:17",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "192.0.2.235",
      "outcome": "AccessDenied",
      "request_id": "df45b0c0-0733-476a-9fa4-e0a1a2c1d9cb"
    },
    {
      "id": 290,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-10 15:11:31",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "web console",
      "source_ip": "192.0.2.65",
      "outcome": "Throttled",
      "request_id": "2d7214a1-5fee-42a3-a1c2-0a7c45bc8690"
    },
    {
      "id": 291,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-01-31 16:32:54",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.243",
      "outcome": "Success",
      "request_id": "86075c66-3f0f-41ab-897d-2b69a435bd0c"
    },
    {
      "id": 292,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-25 03:43:10",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.124",
      "outcome": "Success",
      "request_id": "1dc42a57-108a-48d6-93e5-e5241023f441"
    },
    {
      "id": 293,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-21 04:27:08",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.24",
      "outcome": "Success",
      "request_id": "d8662715-49c6-40f3-ab30-b3c86198a6be"
    },
    {
      "id": 294,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-21 10:56:42",
      "operation": "compute.DescribeInstances",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "198.51.100.169",
      "outcome": "Success",
      "request_id": "80d1d4d1-17d1-42f8-bf32-9ff7bf377cd9"
    },
    {
      "id": 295,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-28 19:04:01",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.68",
      "outcome": "Success",
      "request_id": "5fe3c93f-8fe9-430b-a137-87cb6a5cfc95"
    },
    {
      "id": 296,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-26 19:45:10",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.106",
      "outcome": "Success",
      "request_id": "08ef3c7d-517e-4bb7-a7f9-ced2e7a30448"
    },
    {
      "id": 297,
      "principal_id": 32,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-24 17:20:45",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "internal service",
      "source_ip": "203.0.113.30",
      "outcome": "AccessDenied",
      "request_id": "7e308981-63a6-462a-9ce4-2485d1fc7db8"
    },
    {
      "id": 298,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-22 14:16:50",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.19",
      "outcome": "Success",
      "request_id": "f1b9c456-08c9-40cc-838d-f76d7af94ec9"
    },
    {
      "id": 299,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-21 20:10:13",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.76",
      "outcome": "Success",
      "request_id": "051bf293-6a53-41a2-ba22-0de3f193cafc"
    },
    {
      "id": 300,
      "principal_id": 32,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-26 11:17:25",
      "operation": "network.OpenIngressRule",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.225",
      "outcome": "Success",
      "request_id": "d8e4b53c-b2af-48b2-a2c5-ede294ac7b03"
    },
    {
      "id": 301,
      "principal_id": 22,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-15 21:28:58",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "203.0.113.189",
      "outcome": "Success",
      "request_id": "085806cc-39e0-4ce5-8c1e-ac60c6009a91"
    },
    {
      "id": 302,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-31 06:37:32",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.216",
      "outcome": "Success",
      "request_id": "918c6ca4-aa27-4782-840c-d62dc9de5b46"
    },
    {
      "id": 303,
      "principal_id": 40,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-25 14:14:19",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.88",
      "outcome": "Success",
      "request_id": "446b7d4e-675d-42c3-aa86-758745d7ac08"
    },
    {
      "id": 304,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-24 10:14:27",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "192.0.2.197",
      "outcome": "Success",
      "request_id": "ef78929b-3fb5-4c24-8b22-2faf6ec27444"
    },
    {
      "id": 305,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-07 09:43:40",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.154",
      "outcome": "Success",
      "request_id": "e53982bc-5a14-4bf6-9f03-1e058cd896f2"
    },
    {
      "id": 306,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-08 15:48:39",
      "operation": "audit.DeleteTrail",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.205",
      "outcome": "Success",
      "request_id": "6ac16c32-2bab-4dd4-8b88-bf984a6654c0"
    },
    {
      "id": 307,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-24 13:13:55",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.249",
      "outcome": "NotFound",
      "request_id": "185177a1-bf52-4677-917d-a6222d4f12bb"
    },
    {
      "id": 308,
      "principal_id": 4,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-18 12:39:27",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.70",
      "outcome": "Success",
      "request_id": "490a8e62-80a1-4d98-8388-74a18529ac1a"
    },
    {
      "id": 309,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-25 15:19:55",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.230",
      "outcome": "NotFound",
      "request_id": "b6603e39-18aa-4cbe-ab8d-6a771c36af03"
    },
    {
      "id": 310,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-27 09:01:17",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.22",
      "outcome": "Success",
      "request_id": "9d9ea975-0e71-4310-bf4b-6e637bba3dac"
    },
    {
      "id": 311,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-21 19:51:58",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.205",
      "outcome": "Success",
      "request_id": "d43d00c8-c3fc-482f-b6ff-793a8b9d3ffd"
    },
    {
      "id": 312,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-28 16:19:16",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.179",
      "outcome": "Success",
      "request_id": "350fe5d8-569c-48b9-843a-2e9746a23686"
    },
    {
      "id": 313,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-23 14:37:00",
      "operation": "identity.CreateAccessKey",
      "region": "us-2",
      "client": "command line",
      "source_ip": "192.0.2.251",
      "outcome": "Success",
      "request_id": "c0bae2ca-3bdc-43b8-9c91-a406e688d195"
    },
    {
      "id": 314,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-24 06:03:25",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.190",
      "outcome": "Success",
      "request_id": "b2e4894f-7543-4f18-81d8-a80e882214c3"
    },
    {
      "id": 315,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-27 09:00:25",
      "operation": "keys.Decrypt",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.91",
      "outcome": "Success",
      "request_id": "f876c47e-eb51-46dd-a502-f8ba801c6d95"
    },
    {
      "id": 316,
      "principal_id": 16,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-18 13:56:05",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "203.0.113.233",
      "outcome": "Success",
      "request_id": "80eaa168-1e0f-419c-bd26-29472ecf37fd"
    },
    {
      "id": 317,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-30 01:42:39",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.160",
      "outcome": "Success",
      "request_id": "fd031f08-8e9a-41c3-9695-cde907d4f543"
    },
    {
      "id": 318,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-11 05:07:27",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.69",
      "outcome": "Success",
      "request_id": "8be4a7b3-ddda-4fd4-b35e-0278c175bf23"
    },
    {
      "id": 319,
      "principal_id": 5,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-24 23:35:08",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.27",
      "outcome": "Success",
      "request_id": "ea66ec51-c4c5-44df-a7c2-93bad33cb5dd"
    },
    {
      "id": 320,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-20 17:20:12",
      "operation": "storage.PutObject",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "198.51.100.178",
      "outcome": "Success",
      "request_id": "42e2038d-626a-4907-aa7d-b216bb16a6f8"
    },
    {
      "id": 321,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-04-28 17:43:58",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.69",
      "outcome": "NotFound",
      "request_id": "5f244c21-9d9f-4ff7-95b5-77aba2c8c953"
    },
    {
      "id": 322,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-13 07:37:56",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.176",
      "outcome": "Success",
      "request_id": "a6879928-8111-47b6-b2a3-472c64084923"
    },
    {
      "id": 323,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-12 05:00:56",
      "operation": "storage.ListBuckets",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.173",
      "outcome": "AccessDenied",
      "request_id": "22a9060e-79c4-4916-b32b-da5a7b41f81f"
    },
    {
      "id": 324,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-23 05:43:21",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.231",
      "outcome": "Success",
      "request_id": "76daff59-b646-4e5d-99fb-f040e4f91556"
    },
    {
      "id": 325,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-15 15:48:14",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "198.51.100.70",
      "outcome": "Success",
      "request_id": "3a0ecf92-fd00-47d9-96eb-b74567e3eccd"
    },
    {
      "id": 326,
      "principal_id": 22,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-18 02:30:56",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "192.0.2.233",
      "outcome": "Success",
      "request_id": "236dac1d-2772-459d-9ace-db92c2a250b9"
    },
    {
      "id": 327,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-04-04 10:33:52",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.197",
      "outcome": "Success",
      "request_id": "ff69b075-2e33-4a7c-ba39-f3fc9b3b4e31"
    },
    {
      "id": 328,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-12 05:48:59",
      "operation": "identity.CreateUser",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.72",
      "outcome": "Success",
      "request_id": "b5f7f7d2-ec47-4a10-9e7b-6a28bebfd418"
    },
    {
      "id": 329,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-29 09:39:22",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.234",
      "outcome": "Success",
      "request_id": "f882543a-a159-41e2-9a86-471fc7b14028"
    },
    {
      "id": 330,
      "principal_id": 6,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-01-26 20:14:09",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.223",
      "outcome": "Success",
      "request_id": "14d43f19-8dc6-49d9-bd71-21eb2d0d5eeb"
    },
    {
      "id": 331,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-10 11:27:11",
      "operation": "identity.ListRoles",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "192.0.2.55",
      "outcome": "Success",
      "request_id": "5e6c89e5-17c2-4d49-b1b5-078cb1ea39bf"
    },
    {
      "id": 332,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-08 07:07:39",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "203.0.113.133",
      "outcome": "AccessDenied",
      "request_id": "cf9976af-1998-48cd-a69e-972c12e2e2e3"
    },
    {
      "id": 333,
      "principal_id": 6,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-01-28 18:24:09",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "192.0.2.97",
      "outcome": "Success",
      "request_id": "a6ae1efb-ad89-4791-8d12-b43c2ba3012c"
    },
    {
      "id": 334,
      "principal_id": 6,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-01-30 18:40:51",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "web console",
      "source_ip": "203.0.113.206",
      "outcome": "AccessDenied",
      "request_id": "a52bdbdc-c5d8-40f3-858d-42d844446a85"
    },
    {
      "id": 335,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-07 04:22:59",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.192",
      "outcome": "Success",
      "request_id": "93569947-6565-4bf3-8fea-d641d90eacc9"
    },
    {
      "id": 336,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-12 01:15:55",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "198.51.100.41",
      "outcome": "Success",
      "request_id": "d8a8d89c-0982-41fa-8d53-4a6b7394c003"
    },
    {
      "id": 337,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-01 01:33:58",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.229",
      "outcome": "Success",
      "request_id": "20bb461a-3a31-468f-b440-d65498e405a3"
    },
    {
      "id": 338,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-09 22:38:46",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "203.0.113.154",
      "outcome": "Success",
      "request_id": "f0a52c79-f448-40d2-8c9e-2b1487d27f13"
    },
    {
      "id": 339,
      "principal_id": 4,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-20 15:20:56",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "web console",
      "source_ip": "203.0.113.92",
      "outcome": "Success",
      "request_id": "b165f672-4a60-4005-b5e7-06e262d85613"
    },
    {
      "id": 340,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-19 00:10:47",
      "operation": "storage.ListBuckets",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.208",
      "outcome": "Success",
      "request_id": "f8a98cc5-2472-4a00-807b-9cb0f9e32c0e"
    },
    {
      "id": 341,
      "principal_id": 48,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-01-28 00:58:43",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.4",
      "outcome": "Throttled",
      "request_id": "d347ca38-0907-42e6-a514-94d042b85472"
    },
    {
      "id": 342,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-28 11:31:48",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.125",
      "outcome": "Success",
      "request_id": "944e6907-77e0-4254-86f6-77800ee65f2e"
    },
    {
      "id": 343,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-22 05:45:03",
      "operation": "storage.PutObject",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "192.0.2.79",
      "outcome": "Success",
      "request_id": "16df3242-4ae0-4a71-a57f-053b5da5d155"
    },
    {
      "id": 344,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-10 06:52:41",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.45",
      "outcome": "Success",
      "request_id": "e4f9fceb-20b7-4cf9-963a-1186e8cdda4f"
    },
    {
      "id": 345,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-25 23:22:45",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.195",
      "outcome": "Success",
      "request_id": "07c795ad-cc77-4264-ab62-b747b1057dc0"
    },
    {
      "id": 346,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-21 11:33:26",
      "operation": "identity.CreateUser",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.126",
      "outcome": "Success",
      "request_id": "771f7ba2-360e-43a0-bf2a-04f55d119626"
    },
    {
      "id": 347,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-10 08:25:38",
      "operation": "keys.Decrypt",
      "region": "us-2",
      "client": "command line",
      "source_ip": "198.51.100.213",
      "outcome": "Success",
      "request_id": "2f2f9eec-7444-4290-a338-4c318f4b1d8a"
    },
    {
      "id": 348,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-31 00:46:19",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.138",
      "outcome": "Success",
      "request_id": "f0aadb77-fe80-4589-be17-54c687557314"
    },
    {
      "id": 349,
      "principal_id": 17,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-05-11 14:26:04",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.210",
      "outcome": "Success",
      "request_id": "dd1d1c78-c1c7-430b-b229-deb1e66953d7"
    },
    {
      "id": 350,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-23 21:21:03",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.85",
      "outcome": "Success",
      "request_id": "70d53d94-fb1e-4d47-a090-5cdbf8a453d9"
    },
    {
      "id": 351,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-26 00:35:54",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.114",
      "outcome": "Success",
      "request_id": "2b9a78df-bf7b-4b4f-90d1-96c3262bc443"
    },
    {
      "id": 352,
      "principal_id": 17,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-05-11 17:07:41",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.125",
      "outcome": "Success",
      "request_id": "9d9e83f1-4a5b-4cdb-b166-f05fbd6544d1"
    },
    {
      "id": 353,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-22 19:56:47",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.144",
      "outcome": "NotFound",
      "request_id": "3b6a395a-3f06-4305-b8ac-9f058675b11d"
    },
    {
      "id": 354,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-02 12:50:44",
      "operation": "compute.StartInstance",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.219",
      "outcome": "Success",
      "request_id": "a210e856-1e52-42cc-b19b-2eafcec8d723"
    },
    {
      "id": 355,
      "principal_id": 6,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-01 20:52:19",
      "operation": "keys.Decrypt",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.107",
      "outcome": "Success",
      "request_id": "d4c44c2c-d1e4-435b-9d47-2b02e2efc7ee"
    },
    {
      "id": 356,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-25 12:03:51",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "203.0.113.200",
      "outcome": "Success",
      "request_id": "1d74edb9-7fcc-4278-8666-efb92bd38b3b"
    },
    {
      "id": 357,
      "principal_id": 34,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-08 00:14:42",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.247",
      "outcome": "Success",
      "request_id": "d081563d-0382-402c-a41b-6bcbfc4acad0"
    },
    {
      "id": 358,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-12 07:17:52",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "web console",
      "source_ip": "192.0.2.200",
      "outcome": "Success",
      "request_id": "ee1310a0-feca-4dfe-a7dc-e7c2df9dd63b"
    },
    {
      "id": 359,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-26 04:33:33",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "198.51.100.91",
      "outcome": "Success",
      "request_id": "17d93fd7-89ca-42ab-a2f9-8b9c5add1de7"
    },
    {
      "id": 360,
      "principal_id": 45,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-11 07:41:47",
      "operation": "compute.StartInstance",
      "region": "us-2",
      "client": "web console",
      "source_ip": "198.51.100.161",
      "outcome": "Success",
      "request_id": "e48cc110-9ee6-482a-a927-c3b704ffb71b"
    },
    {
      "id": 361,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-01 22:44:32",
      "operation": "identity.AttachAdminPolicy",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.37",
      "outcome": "Success",
      "request_id": "364d9609-81a4-476e-af9a-d0ffbcfb1dad"
    },
    {
      "id": 362,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-04 07:30:24",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.80",
      "outcome": "Success",
      "request_id": "6d10ff4a-b8d0-4686-bead-09bce588f0df"
    },
    {
      "id": 363,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-29 13:52:31",
      "operation": "identity.AttachAdminPolicy",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.49",
      "outcome": "Success",
      "request_id": "9a51be31-d419-48d1-8810-9d17533ba13b"
    },
    {
      "id": 364,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-12 10:36:07",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.13",
      "outcome": "Success",
      "request_id": "b1f5dffc-a1af-47f6-8f0c-9c6263fe6596"
    },
    {
      "id": 365,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-08 10:54:57",
      "operation": "storage.SetBucketPolicy",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.119",
      "outcome": "Success",
      "request_id": "79a50706-a668-400a-9624-e881fe3c9eaa"
    },
    {
      "id": 366,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-13 23:30:08",
      "operation": "compute.DeleteInstance",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "198.51.100.233",
      "outcome": "Success",
      "request_id": "97d69ec8-5ea7-4a0e-b9d3-e7ef8c18bd8a"
    },
    {
      "id": 367,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-15 20:14:36",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "192.0.2.223",
      "outcome": "Success",
      "request_id": "1d1393e9-5ad9-4450-bc67-be58b8f2202f"
    },
    {
      "id": 368,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-25 03:17:18",
      "operation": "compute.StartInstance",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.118",
      "outcome": "Success",
      "request_id": "f838a2fb-487f-4233-baf6-46bd57d9159a"
    },
    {
      "id": 369,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-11 18:23:54",
      "operation": "audit.StopLogging",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "192.0.2.194",
      "outcome": "Success",
      "request_id": "1a56bbed-08a6-49fb-8f7b-64fc3f6993ec"
    },
    {
      "id": 370,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-13 01:41:33",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "web console",
      "source_ip": "203.0.113.147",
      "outcome": "Success",
      "request_id": "9205a61e-d63e-4ac1-bbda-61312ea63e72"
    },
    {
      "id": 371,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-27 17:47:11",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.186",
      "outcome": "Success",
      "request_id": "7965f02c-5c1e-48de-b27f-560aec393c7c"
    },
    {
      "id": 372,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-12 15:41:30",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.165",
      "outcome": "Success",
      "request_id": "6c6ee57c-462b-4f54-8611-9f1e69fc5e0f"
    },
    {
      "id": 373,
      "principal_id": 40,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-25 19:46:19",
      "operation": "identity.CreateAccessKey",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.207",
      "outcome": "Success",
      "request_id": "407a7ec8-8a23-4bc5-8162-f78165298dac"
    },
    {
      "id": 374,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-26 15:34:41",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.177",
      "outcome": "Success",
      "request_id": "f4c09c5d-e42c-4e52-8ce5-4c72adeec214"
    },
    {
      "id": 375,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-14 23:33:52",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.147",
      "outcome": "Success",
      "request_id": "9cd2a401-3805-47a2-bcf5-bba3c8c6c6db"
    },
    {
      "id": 376,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-28 17:22:48",
      "operation": "storage.SetBucketPolicy",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "203.0.113.99",
      "outcome": "AccessDenied",
      "request_id": "5f270cd4-48a0-4881-9ddd-57634429cb61"
    },
    {
      "id": 377,
      "principal_id": 37,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-01-25 17:03:33",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.126",
      "outcome": "Success",
      "request_id": "2e851692-3ce8-428b-acb2-5619950c9e0c"
    },
    {
      "id": 378,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-28 05:18:05",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.79",
      "outcome": "Success",
      "request_id": "1dec8f9d-9ea4-4e2e-bd57-0c05d2f816a1"
    },
    {
      "id": 379,
      "principal_id": 26,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-16 04:35:58",
      "operation": "compute.DescribeInstances",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.249",
      "outcome": "Success",
      "request_id": "f6cfcc33-46ba-4c47-af65-b1298ef82437"
    },
    {
      "id": 380,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-13 23:45:19",
      "operation": "identity.CreateUser",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.89",
      "outcome": "Success",
      "request_id": "77beacf6-8f09-4872-a1c5-982474a6c725"
    },
    {
      "id": 381,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-04 17:08:02",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "198.51.100.171",
      "outcome": "Success",
      "request_id": "fadb052c-f287-4288-9526-1ddf1b18c52d"
    },
    {
      "id": 382,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-01 01:00:59",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "203.0.113.244",
      "outcome": "Success",
      "request_id": "7b96df45-61cb-4757-be74-50c1f6b1bc25"
    },
    {
      "id": 383,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-28 01:38:24",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.120",
      "outcome": "Success",
      "request_id": "64edc620-fcec-4e51-aec7-8cd7a08e749b"
    },
    {
      "id": 384,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-04-07 04:16:35",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "internal service",
      "source_ip": "192.0.2.136",
      "outcome": "Success",
      "request_id": "dbdb5680-8067-42ff-8179-ceee07d3ab02"
    },
    {
      "id": 385,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-03 00:34:00",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.152",
      "outcome": "Success",
      "request_id": "a47bf5be-9c61-49f2-9b54-36a6865c9548"
    },
    {
      "id": 386,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-28 16:48:01",
      "operation": "storage.ListBuckets",
      "region": "us-2",
      "client": "web console",
      "source_ip": "192.0.2.162",
      "outcome": "Success",
      "request_id": "bbeb24aa-f435-4990-be2e-2518c49fd93c"
    },
    {
      "id": 387,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-13 21:52:14",
      "operation": "storage.PutObject",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "203.0.113.147",
      "outcome": "Success",
      "request_id": "d566c659-4c39-4fb2-b0aa-5667742c3881"
    },
    {
      "id": 388,
      "principal_id": 60,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-26 22:53:13",
      "operation": "compute.DescribeInstances",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.9",
      "outcome": "Success",
      "request_id": "6f37c5e4-34f8-42f3-971d-1ac09eea2208"
    },
    {
      "id": 389,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-31 10:51:09",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "203.0.113.101",
      "outcome": "Success",
      "request_id": "93d69652-33a4-4b23-8b30-0b1923d8e854"
    },
    {
      "id": 390,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-18 00:38:28",
      "operation": "storage.SetBucketPolicy",
      "region": "global",
      "client": "SDK",
      "source_ip": "192.0.2.179",
      "outcome": "Success",
      "request_id": "e7454db0-c582-4c32-8b36-28fefc455391"
    },
    {
      "id": 391,
      "principal_id": 50,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-01-08 14:15:14",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "web console",
      "source_ip": "198.51.100.131",
      "outcome": "Success",
      "request_id": "2bd3da19-1fe7-4541-9270-14f22d9dfe19"
    },
    {
      "id": 392,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-28 07:53:04",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.2",
      "outcome": "Success",
      "request_id": "2edb990a-b6f7-461d-afc0-f5e0ae88c6a7"
    },
    {
      "id": 393,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-06-01 21:03:08",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.165",
      "outcome": "Success",
      "request_id": "6bd04257-6c37-4f95-b3dd-b263ed3b263c"
    },
    {
      "id": 394,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-30 14:07:20",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.141",
      "outcome": "Success",
      "request_id": "0fcef7fb-9870-4c4a-b1bf-ddc57f084c75"
    },
    {
      "id": 395,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-23 10:29:24",
      "operation": "network.OpenIngressRule",
      "region": "global",
      "client": "command line",
      "source_ip": "203.0.113.42",
      "outcome": "Success",
      "request_id": "86ba851d-9e78-450a-9026-94bb210886ad"
    },
    {
      "id": 396,
      "principal_id": 49,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-05-25 20:18:07",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "192.0.2.79",
      "outcome": "Success",
      "request_id": "03b5148f-df98-413f-991d-76b7d718cad0"
    },
    {
      "id": 397,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-16 17:31:20",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.15",
      "outcome": "Success",
      "request_id": "2c4065e0-976d-46e5-a216-d7ce477423a1"
    },
    {
      "id": 398,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-06-04 18:26:53",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.215",
      "outcome": "Success",
      "request_id": "275b9f8b-0e46-4531-85dd-361e698d5353"
    },
    {
      "id": 399,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-03 07:00:21",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.223",
      "outcome": "Success",
      "request_id": "4ead917b-85f5-495f-8d44-0ad1e5eacb6c"
    },
    {
      "id": 400,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-01-31 17:03:35",
      "operation": "storage.ListBuckets",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.246",
      "outcome": "Success",
      "request_id": "795e80de-515a-4cc9-8e5c-2640d1f64edb"
    },
    {
      "id": 401,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-07 07:03:39",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.72",
      "outcome": "Success",
      "request_id": "a1b0547d-ecc2-47ae-b3d0-df798e5cbefe"
    },
    {
      "id": 402,
      "principal_id": 34,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-10 06:43:49",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.159",
      "outcome": "Success",
      "request_id": "c3453f94-6af2-4acb-a033-0bf04aaffd7a"
    },
    {
      "id": 403,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-03 00:04:16",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "192.0.2.140",
      "outcome": "Success",
      "request_id": "b2786274-8c67-4d39-aeef-8949a6014e04"
    },
    {
      "id": 404,
      "principal_id": 58,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-20 02:42:15",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.184",
      "outcome": "Success",
      "request_id": "8150799d-21ed-4548-bb1f-184df0253772"
    },
    {
      "id": 405,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-31 10:58:50",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.64",
      "outcome": "Success",
      "request_id": "11d882f4-208e-46df-8e5a-ea0ed410177d"
    },
    {
      "id": 406,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-18 01:08:58",
      "operation": "compute.StartInstance",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.34",
      "outcome": "Success",
      "request_id": "6611b5a4-0afb-49d7-82a1-c62679540026"
    },
    {
      "id": 407,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-12 21:48:41",
      "operation": "billing.GetCostReport",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "198.51.100.156",
      "outcome": "Success",
      "request_id": "a0870a01-73c1-400c-9fd7-b529d6809d86"
    },
    {
      "id": 408,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-03 18:32:02",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.148",
      "outcome": "Success",
      "request_id": "cb8ec6ed-43ca-4a22-bf22-ae7e01749319"
    },
    {
      "id": 409,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-11 11:48:50",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.187",
      "outcome": "Success",
      "request_id": "37a6640f-e672-4fc0-8973-f48dd348e67f"
    },
    {
      "id": 410,
      "principal_id": 5,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-25 22:34:15",
      "operation": "storage.PutObject",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "192.0.2.72",
      "outcome": "Success",
      "request_id": "20bfdf45-a6a0-4e13-a8bf-daf74dd54d1f"
    },
    {
      "id": 411,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-12 16:49:49",
      "operation": "compute.DeleteInstance",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.118",
      "outcome": "Success",
      "request_id": "7a75bf3a-28d8-4a36-b6d1-075ec86f9ba2"
    },
    {
      "id": 412,
      "principal_id": 21,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-05-01 19:05:31",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.211",
      "outcome": "AccessDenied",
      "request_id": "f708d42f-3e6c-4885-bc77-69e5379a7fcf"
    },
    {
      "id": 413,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-31 08:10:16",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "web console",
      "source_ip": "198.51.100.233",
      "outcome": "Success",
      "request_id": "6a492b07-84c1-4df1-9c4e-074d9842e2fc"
    },
    {
      "id": 414,
      "principal_id": 17,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-05-13 20:04:53",
      "operation": "audit.DeleteTrail",
      "region": "global",
      "client": "command line",
      "source_ip": "192.0.2.96",
      "outcome": "Success",
      "request_id": "bdad3b4e-aa38-47cc-a368-6907bd138cb9"
    },
    {
      "id": 415,
      "principal_id": 8,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-02-28 00:51:52",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "198.51.100.77",
      "outcome": "Success",
      "request_id": "f912b331-1acd-4f01-a0d7-5edb89118428"
    },
    {
      "id": 416,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-26 13:52:04",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "198.51.100.40",
      "outcome": "Success",
      "request_id": "9d440fd4-39b2-4215-b03c-b79d298e4512"
    },
    {
      "id": 417,
      "principal_id": 17,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-05-16 03:14:59",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.37",
      "outcome": "Success",
      "request_id": "32fca519-cf8e-4349-9281-773b2a34b44b"
    },
    {
      "id": 418,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-05 12:05:57",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "192.0.2.99",
      "outcome": "Success",
      "request_id": "0b418bd5-cc5d-4432-b7b9-99941f5fa658"
    },
    {
      "id": 419,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-01 16:05:11",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.49",
      "outcome": "Success",
      "request_id": "8e631ec5-55e3-4b41-accd-017b9dfa5a11"
    },
    {
      "id": 420,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-03 13:54:38",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.174",
      "outcome": "Success",
      "request_id": "067e66cf-2915-4e3b-bc54-e86b3dac8f95"
    },
    {
      "id": 421,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-16 23:16:17",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "198.51.100.58",
      "outcome": "Success",
      "request_id": "069895ed-4b24-4e3e-9bc6-949bb34f4357"
    },
    {
      "id": 422,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-06-08 15:09:08",
      "operation": "audit.StopLogging",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.219",
      "outcome": "Success",
      "request_id": "74c6a3b1-6ccd-4fec-80a0-baa5d90aeb74"
    },
    {
      "id": 423,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-06 05:35:13",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.250",
      "outcome": "Success",
      "request_id": "be57abb5-452e-4343-9d8e-ca43b9f41c98"
    },
    {
      "id": 424,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-12 15:39:14",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.5",
      "outcome": "AccessDenied",
      "request_id": "4267e78a-b163-423d-88aa-b1afa61eb6ab"
    },
    {
      "id": 425,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-01 15:22:40",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "192.0.2.171",
      "outcome": "Success",
      "request_id": "2e5c7214-7420-4b69-8e9c-9fc040605cc2"
    },
    {
      "id": 426,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-05 09:32:33",
      "operation": "identity.AttachAdminPolicy",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.43",
      "outcome": "Success",
      "request_id": "4d498245-11e5-4de4-999a-6b8b8a82de55"
    },
    {
      "id": 427,
      "principal_id": 8,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-02 15:24:20",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.138",
      "outcome": "Success",
      "request_id": "e54b57ce-9647-481b-8764-1a3f3b8148d3"
    },
    {
      "id": 428,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-05 11:31:01",
      "operation": "identity.ListRoles",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.93",
      "outcome": "Success",
      "request_id": "b6edf587-d9b3-4263-b944-a12d7278dc07"
    },
    {
      "id": 429,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-03-03 05:04:28",
      "operation": "billing.GetCostReport",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.181",
      "outcome": "Success",
      "request_id": "e24841c2-2495-4222-a117-260a4655df4e"
    },
    {
      "id": 430,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-13 01:25:09",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "web console",
      "source_ip": "192.0.2.63",
      "outcome": "Success",
      "request_id": "6bbcb0b4-e627-4bf9-b952-f234f19a2b06"
    },
    {
      "id": 431,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-28 04:22:54",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.252",
      "outcome": "Success",
      "request_id": "8edb2d54-fdc5-4480-8946-b4b8492f1cc9"
    },
    {
      "id": 432,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-14 05:53:44",
      "operation": "identity.ListRoles",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "203.0.113.51",
      "outcome": "Success",
      "request_id": "735b86ed-b6f4-46b3-8d93-390ae29db5d8"
    },
    {
      "id": 433,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-08 02:20:07",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.15",
      "outcome": "Success",
      "request_id": "adbec934-11c9-411d-9ae3-47bf60b39419"
    },
    {
      "id": 434,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-28 19:40:52",
      "operation": "compute.DescribeInstances",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.117",
      "outcome": "Success",
      "request_id": "a0b8dd4b-1737-4d21-bfff-a0b72209e550"
    },
    {
      "id": 435,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-16 14:32:57",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.226",
      "outcome": "Success",
      "request_id": "1174cc0d-3d61-4e86-bb56-85a976d876e7"
    },
    {
      "id": 436,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-19 07:47:54",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.44",
      "outcome": "Success",
      "request_id": "ce930a2e-e0be-47fb-ab02-9ec380e82c95"
    },
    {
      "id": 437,
      "principal_id": 19,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-20 21:57:31",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.38",
      "outcome": "Success",
      "request_id": "23df7b03-437d-48e5-91f8-1ed5c9900010"
    },
    {
      "id": 438,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-01-30 22:30:56",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.172",
      "outcome": "Success",
      "request_id": "d2fe519e-beae-4bd4-b9f9-3d5eee70236b"
    },
    {
      "id": 439,
      "principal_id": 22,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-18 13:38:43",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.115",
      "outcome": "Success",
      "request_id": "a48c8574-969d-4f3e-925e-6a8a999e6d18"
    },
    {
      "id": 440,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-20 20:54:14",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.80",
      "outcome": "NotFound",
      "request_id": "7ddcfebe-4eaa-4c90-8191-bbe9774c4cb1"
    },
    {
      "id": 441,
      "principal_id": 22,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-20 08:54:34",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "web console",
      "source_ip": "198.51.100.216",
      "outcome": "Success",
      "request_id": "43cbbfc8-8ea7-43ca-9b02-69a81554b8df"
    },
    {
      "id": 442,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-01 18:19:40",
      "operation": "storage.ListBuckets",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.109",
      "outcome": "Success",
      "request_id": "886cdb07-9c94-4814-aa41-53f0f84b9c8a"
    },
    {
      "id": 443,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-23 04:51:20",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "internal service",
      "source_ip": "198.51.100.48",
      "outcome": "Success",
      "request_id": "bb00263d-2d30-46ce-8644-92f547295636"
    },
    {
      "id": 444,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-15 13:55:59",
      "operation": "identity.AttachAdminPolicy",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.233",
      "outcome": "Success",
      "request_id": "eab6a5b6-b123-4957-9016-a54a974b369d"
    },
    {
      "id": 445,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-18 00:41:50",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.61",
      "outcome": "Success",
      "request_id": "502a6f30-6ad4-4872-a0f1-552f55e487c2"
    },
    {
      "id": 446,
      "principal_id": 19,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-22 16:11:22",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "198.51.100.210",
      "outcome": "Success",
      "request_id": "0a5971e0-af8d-4bbd-861b-34639614401c"
    },
    {
      "id": 447,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-03 16:00:47",
      "operation": "identity.CreateAccessKey",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.126",
      "outcome": "Success",
      "request_id": "2b583bd8-3d7d-4196-81c5-80fe636fb49c"
    },
    {
      "id": 448,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-05 19:08:19",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "command line",
      "source_ip": "192.0.2.54",
      "outcome": "Success",
      "request_id": "7ee92f73-244c-4746-bbf0-cc2d245fcf50"
    },
    {
      "id": 449,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-06 14:40:52",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.1",
      "outcome": "Success",
      "request_id": "68552448-98ee-4e2b-9305-35fdccb01945"
    },
    {
      "id": 450,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-05-31 10:58:04",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.109",
      "outcome": "Success",
      "request_id": "ff5be926-f086-4053-bb95-6abb6323b06e"
    },
    {
      "id": 451,
      "principal_id": 8,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-04 04:48:08",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.206",
      "outcome": "Success",
      "request_id": "e6f45154-cd9e-4b3f-b9cb-57f57abac241"
    },
    {
      "id": 452,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-08 18:02:48",
      "operation": "audit.StopLogging",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "192.0.2.136",
      "outcome": "Success",
      "request_id": "896fadef-c566-4e99-8128-ad78750c604c"
    },
    {
      "id": 453,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-15 23:36:52",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.110",
      "outcome": "Success",
      "request_id": "bc6e4bc1-876c-4e4b-ae17-ec9b3c5ea228"
    },
    {
      "id": 454,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-04-02 09:57:19",
      "operation": "compute.StartInstance",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.169",
      "outcome": "Success",
      "request_id": "0bc95b83-f8ec-4cb6-811b-1945aa3ff8b9"
    },
    {
      "id": 455,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-14 17:53:42",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "198.51.100.47",
      "outcome": "ValidationError",
      "request_id": "9a3a94de-42cf-4401-85c7-4b169193feef"
    },
    {
      "id": 456,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-25 18:11:10",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.208",
      "outcome": "Success",
      "request_id": "4cbceb35-aeec-421e-8ca5-a6fb518a588a"
    },
    {
      "id": 457,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-29 02:10:21",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.128",
      "outcome": "Success",
      "request_id": "d88a93dc-41d0-4cce-a15e-1e183783bab6"
    },
    {
      "id": 458,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-26 14:40:14",
      "operation": "compute.DescribeInstances",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "192.0.2.254",
      "outcome": "Success",
      "request_id": "18e48e13-583c-4643-ad65-9dc4ffe71d20"
    },
    {
      "id": 459,
      "principal_id": 42,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-02-07 14:46:44",
      "operation": "storage.SetBucketPolicy",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.3",
      "outcome": "Success",
      "request_id": "0c12124d-3fb1-4eb7-836a-b2564c1d5b8f"
    },
    {
      "id": 460,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-13 10:54:40",
      "operation": "identity.ListRoles",
      "region": "eu-2",
      "client": "internal service",
      "source_ip": "192.0.2.239",
      "outcome": "Success",
      "request_id": "454bc6cd-6af6-404e-a60d-a382a0abe810"
    },
    {
      "id": 461,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-16 22:01:59",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.88",
      "outcome": "Success",
      "request_id": "6524096c-52c8-43a6-9fa8-e0da995cfceb"
    },
    {
      "id": 462,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-07 00:21:29",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "web console",
      "source_ip": "198.51.100.73",
      "outcome": "Success",
      "request_id": "377da065-a385-4946-bfd4-1841e89889d4"
    },
    {
      "id": 463,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-06 08:37:21",
      "operation": "identity.CreateUser",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "198.51.100.134",
      "outcome": "Success",
      "request_id": "67584473-42ab-4f58-a263-3457ce5cd342"
    },
    {
      "id": 464,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-30 15:54:20",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.139",
      "outcome": "Success",
      "request_id": "0afca476-8bc8-49cb-97de-4b44891ef30c"
    },
    {
      "id": 465,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-27 06:45:42",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.125",
      "outcome": "Success",
      "request_id": "f06f0aa5-0278-4ce5-82bd-2fb0832c84b4"
    },
    {
      "id": 466,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-18 01:47:10",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.61",
      "outcome": "Success",
      "request_id": "e84cce6a-c0ff-4e67-ac13-69566b519d4e"
    },
    {
      "id": 467,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-19 09:42:13",
      "operation": "compute.StartInstance",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.121",
      "outcome": "Success",
      "request_id": "533ef874-ba73-4c31-9e85-20079ef3efe6"
    },
    {
      "id": 468,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-02 04:32:15",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "203.0.113.125",
      "outcome": "Success",
      "request_id": "bf1d3034-402e-497e-acb2-ea46e2ab73a0"
    },
    {
      "id": 469,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-09 05:08:55",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "198.51.100.184",
      "outcome": "Success",
      "request_id": "25f432ed-8b28-4781-b876-e1bf2f364c65"
    },
    {
      "id": 470,
      "principal_id": 33,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-22 23:03:34",
      "operation": "audit.StopLogging",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.118",
      "outcome": "Success",
      "request_id": "67d5ced4-23ef-476e-9ee6-32f1a606862f"
    },
    {
      "id": 471,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-24 23:05:16",
      "operation": "identity.CreateUser",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.59",
      "outcome": "Success",
      "request_id": "9a8b0174-aed7-44b5-b331-26f24f8c1c5d"
    },
    {
      "id": 472,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-04 17:32:24",
      "operation": "storage.SetBucketPolicy",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "203.0.113.225",
      "outcome": "Success",
      "request_id": "a832f77e-d780-456a-ae8f-d05a40fb1204"
    },
    {
      "id": 473,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-06 05:12:28",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.141",
      "outcome": "Success",
      "request_id": "02b3fbce-f1a2-4368-82dc-a8c9ff7c22e0"
    },
    {
      "id": 474,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-04-03 05:14:40",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.231",
      "outcome": "AccessDenied",
      "request_id": "f1638f6f-d59c-44b2-9e87-d4c6e7eee39a"
    },
    {
      "id": 475,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-06-07 16:47:11",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.160",
      "outcome": "Success",
      "request_id": "f61a202d-ad07-4a94-ab8e-2fc2fab68752"
    },
    {
      "id": 476,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-10 06:57:27",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.83",
      "outcome": "Success",
      "request_id": "7440d53f-09cb-46b4-b186-6383a6074d26"
    },
    {
      "id": 477,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-03 11:32:10",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "198.51.100.248",
      "outcome": "Success",
      "request_id": "bbad76bb-96b8-4c70-8291-ab6400d3901f"
    },
    {
      "id": 478,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-17 01:13:50",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "command line",
      "source_ip": "192.0.2.6",
      "outcome": "AccessDenied",
      "request_id": "67fc6664-b373-481f-8048-cddfd493954e"
    },
    {
      "id": 479,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-28 19:51:13",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.174",
      "outcome": "Success",
      "request_id": "1a36915b-1e27-4f79-9e7f-a9b7af5ea2fd"
    },
    {
      "id": 480,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-02 00:58:26",
      "operation": "compute.DescribeInstances",
      "region": "us-2",
      "client": "command line",
      "source_ip": "203.0.113.130",
      "outcome": "Success",
      "request_id": "1c30ff40-8731-42ba-a718-7766453bff52"
    },
    {
      "id": 481,
      "principal_id": 45,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-13 06:15:49",
      "operation": "billing.GetCostReport",
      "region": "us-2",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.102",
      "outcome": "Success",
      "request_id": "fd899721-388f-4cdc-a7f7-92559d6f154c"
    },
    {
      "id": 482,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-20 00:31:41",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.159",
      "outcome": "Success",
      "request_id": "996c85a3-343b-43e0-9d30-b534c3c84990"
    },
    {
      "id": 483,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-03-06 02:25:41",
      "operation": "keys.Decrypt",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "192.0.2.42",
      "outcome": "Success",
      "request_id": "69c768c3-27b3-4653-8a6e-7c2962af5f8b"
    },
    {
      "id": 484,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-20 16:00:23",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.172",
      "outcome": "Success",
      "request_id": "1f28d1ca-4780-4768-9ab4-7963f81f5105"
    },
    {
      "id": 485,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-30 20:25:17",
      "operation": "audit.StopLogging",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.233",
      "outcome": "Success",
      "request_id": "eec06fd8-8549-40cb-a4b3-3c65435f68f3"
    },
    {
      "id": 486,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-20 04:51:30",
      "operation": "identity.ListRoles",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "192.0.2.221",
      "outcome": "Success",
      "request_id": "a2185c34-290a-4e1a-8455-10f6737c1b03"
    },
    {
      "id": 487,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-14 15:28:58",
      "operation": "identity.CreateAccessKey",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.104",
      "outcome": "Success",
      "request_id": "c471514c-4e89-49ca-aaf7-0a39f22f5d96"
    },
    {
      "id": 488,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-08 20:54:46",
      "operation": "compute.StartInstance",
      "region": "us-2",
      "client": "web console",
      "source_ip": "203.0.113.46",
      "outcome": "Success",
      "request_id": "ba0e8b0f-aa76-4a1f-aac6-4bdc4b5a59be"
    },
    {
      "id": 489,
      "principal_id": 37,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-01-28 16:51:47",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.231",
      "outcome": "Success",
      "request_id": "2969b44a-8588-4d4b-b7ba-0502412d5349"
    },
    {
      "id": 490,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-18 11:19:30",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.153",
      "outcome": "Success",
      "request_id": "fae223c5-a1bf-4d2c-aaa5-eddee4c2770f"
    },
    {
      "id": 491,
      "principal_id": 26,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-17 16:14:44",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.41",
      "outcome": "AccessDenied",
      "request_id": "499ab1d9-3e9a-4955-a7a0-7b3c1aa60f69"
    },
    {
      "id": 492,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-21 15:31:42",
      "operation": "storage.SetBucketPolicy",
      "region": "global",
      "client": "web console",
      "source_ip": "203.0.113.234",
      "outcome": "Success",
      "request_id": "141fa3a8-a041-4d5c-b009-9389ced5949f"
    },
    {
      "id": 493,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-13 06:26:39",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "command line",
      "source_ip": "192.0.2.23",
      "outcome": "Success",
      "request_id": "8dd1ed79-c771-4802-8272-64524de396c0"
    },
    {
      "id": 494,
      "principal_id": 14,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-02-19 17:39:04",
      "operation": "storage.ListBuckets",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.169",
      "outcome": "Success",
      "request_id": "b9a351fc-c169-46b1-adcc-5539a50ce291"
    },
    {
      "id": 495,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-15 10:50:20",
      "operation": "identity.AttachAdminPolicy",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.195",
      "outcome": "Success",
      "request_id": "618c64ea-1800-4438-b5be-427bdfbe3035"
    },
    {
      "id": 496,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-23 13:08:11",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "203.0.113.201",
      "outcome": "Success",
      "request_id": "c25cc72b-37cc-48ab-9272-c2f85f83e94c"
    },
    {
      "id": 497,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-02 18:55:07",
      "operation": "identity.CreateAccessKey",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.115",
      "outcome": "Success",
      "request_id": "ca219e6d-d11d-4245-bc44-643eb250918c"
    },
    {
      "id": 498,
      "principal_id": 49,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-05-28 08:38:32",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.245",
      "outcome": "Success",
      "request_id": "afb2b678-318e-42e3-a663-fa11cbdf0f7e"
    },
    {
      "id": 499,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-28 06:49:54",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.36",
      "outcome": "Success",
      "request_id": "2546ccf1-5af8-42e8-9c12-340004da3953"
    },
    {
      "id": 500,
      "principal_id": 35,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-15 14:35:44",
      "operation": "storage.ListBuckets",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "192.0.2.223",
      "outcome": "Success",
      "request_id": "4d0875f8-77bd-4be5-bdfc-e96bfb506b02"
    },
    {
      "id": 501,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-25 15:45:12",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.133",
      "outcome": "Success",
      "request_id": "f5ef934a-7fb8-484a-850a-79b64e5ab1da"
    },
    {
      "id": 502,
      "principal_id": 3,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-05-30 10:28:18",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "web console",
      "source_ip": "192.0.2.187",
      "outcome": "Success",
      "request_id": "c6cc3eef-b05b-40d9-9931-d02ed5d394ee"
    },
    {
      "id": 503,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-19 14:06:15",
      "operation": "identity.CreateUser",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "203.0.113.224",
      "outcome": "Success",
      "request_id": "426379d4-e344-4e73-8d53-7f539a5995b9"
    },
    {
      "id": 504,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-19 05:17:30",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.22",
      "outcome": "Success",
      "request_id": "e1050346-0142-43cf-918d-04a720858909"
    },
    {
      "id": 505,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-04 18:19:22",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "web console",
      "source_ip": "192.0.2.97",
      "outcome": "ValidationError",
      "request_id": "00cf241d-7746-45c1-aec7-f7331eed733a"
    },
    {
      "id": 506,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-02 13:06:09",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.61",
      "outcome": "AccessDenied",
      "request_id": "06e9ee77-139a-4f22-9533-21f8d036b156"
    },
    {
      "id": 507,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-03-06 08:08:44",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.59",
      "outcome": "Success",
      "request_id": "19c6b57b-4c16-471a-8468-b5d8b108e96d"
    },
    {
      "id": 508,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-21 01:08:55",
      "operation": "keys.Decrypt",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.160",
      "outcome": "NotFound",
      "request_id": "cda1cbb2-d1bf-42be-b5ec-ac06dfc5ec9a"
    },
    {
      "id": 509,
      "principal_id": 11,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-06-10 14:40:09",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "internal service",
      "source_ip": "198.51.100.198",
      "outcome": "Success",
      "request_id": "dd48290e-83c0-466c-b3f6-61cd17183701"
    },
    {
      "id": 510,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-08 08:54:07",
      "operation": "audit.StopLogging",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.143",
      "outcome": "Success",
      "request_id": "278c8099-79c4-4151-801e-7005b7aaa877"
    },
    {
      "id": 511,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-05 20:39:26",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "198.51.100.30",
      "outcome": "Success",
      "request_id": "f5d12348-8d89-4fdb-928a-18a8907a4c56"
    },
    {
      "id": 512,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-20 17:38:24",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "command line",
      "source_ip": "198.51.100.239",
      "outcome": "Success",
      "request_id": "e3d37e17-c55e-4a3f-aa4d-911a558f92bf"
    },
    {
      "id": 513,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-07 09:49:27",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.115",
      "outcome": "Success",
      "request_id": "1bd8147b-01cd-467f-adf7-311e87ecaed9"
    },
    {
      "id": 514,
      "principal_id": 59,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-09 05:46:39",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.187",
      "outcome": "Success",
      "request_id": "ddbe43fe-71c3-4d39-a579-a7ae87f1acec"
    },
    {
      "id": 515,
      "principal_id": 10,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-06 11:47:50",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.205",
      "outcome": "AccessDenied",
      "request_id": "128e90c8-6dc0-44d1-8e37-57bcb4daa125"
    },
    {
      "id": 516,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-03-06 22:11:23",
      "operation": "compute.DeleteInstance",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "203.0.113.73",
      "outcome": "Success",
      "request_id": "adadc756-45a6-4be4-958b-f0fcc2e36640"
    },
    {
      "id": 517,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-08 13:40:37",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.189",
      "outcome": "Success",
      "request_id": "e6c651eb-2add-4be3-bb69-c8b3a9f9d922"
    },
    {
      "id": 518,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-21 17:57:29",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.94",
      "outcome": "Throttled",
      "request_id": "1e525386-e9dd-4056-87bf-60a30cd1eb9f"
    },
    {
      "id": 519,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-02-02 22:15:32",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.41",
      "outcome": "Success",
      "request_id": "ec30dc86-1e90-499d-9ee3-60f8e61fedd1"
    },
    {
      "id": 520,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-04-03 15:55:01",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "command line",
      "source_ip": "192.0.2.160",
      "outcome": "Success",
      "request_id": "a171c756-faf1-4a42-b89c-2142ebb1e7e4"
    },
    {
      "id": 521,
      "principal_id": 5,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-27 08:49:05",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.45",
      "outcome": "AccessDenied",
      "request_id": "334834aa-eac5-490c-8cb1-e80cd4ae543a"
    },
    {
      "id": 522,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-04 05:15:29",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.166",
      "outcome": "Throttled",
      "request_id": "9b428637-659b-456f-8187-beedfd4bf918"
    },
    {
      "id": 523,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-09 02:30:05",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "192.0.2.194",
      "outcome": "Success",
      "request_id": "e881273b-1c19-4b3f-92a8-687e2f94be68"
    },
    {
      "id": 524,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-22 07:55:45",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.72",
      "outcome": "Success",
      "request_id": "a079d16d-5e05-4fc1-8d5a-e3b18ef60406"
    },
    {
      "id": 525,
      "principal_id": 48,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-01-28 07:25:45",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.32",
      "outcome": "Success",
      "request_id": "90294918-890f-4b9a-ba15-7bdd0e8c1742"
    },
    {
      "id": 526,
      "principal_id": 51,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-05-01 12:44:10",
      "operation": "identity.AttachAdminPolicy",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.150",
      "outcome": "Success",
      "request_id": "db10a77b-596f-4cf4-a19f-39ded3bffa32"
    },
    {
      "id": 527,
      "principal_id": 4,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-22 15:19:59",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "web console",
      "source_ip": "203.0.113.165",
      "outcome": "Success",
      "request_id": "c11daf80-a5db-4520-8896-22fbc8fd5db3"
    },
    {
      "id": 528,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-06-08 23:18:45",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.230",
      "outcome": "Success",
      "request_id": "41bf277c-9558-4247-baa6-e0cd12ac459e"
    },
    {
      "id": 529,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-08 21:09:47",
      "operation": "identity.CreateAccessKey",
      "region": "global",
      "client": "SDK",
      "source_ip": "192.0.2.50",
      "outcome": "Success",
      "request_id": "a151ebb0-ddd9-43a0-94a2-1c48e21606f3"
    },
    {
      "id": 530,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-10 02:22:39",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "203.0.113.220",
      "outcome": "Success",
      "request_id": "3d53da6a-35ed-4fa6-8afb-d55d6dafa289"
    },
    {
      "id": 531,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-10 17:02:36",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.25",
      "outcome": "Success",
      "request_id": "5d5f6b4f-358a-48c7-9767-11967003b267"
    },
    {
      "id": 532,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-10 12:52:17",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "192.0.2.66",
      "outcome": "Success",
      "request_id": "930f5c98-4e7a-44dc-857d-2ef18f269a44"
    },
    {
      "id": 533,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-02 07:01:31",
      "operation": "storage.ListBuckets",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.18",
      "outcome": "AccessDenied",
      "request_id": "77c24b0d-1543-4f20-b66b-c6270a060c80"
    },
    {
      "id": 534,
      "principal_id": 48,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-01-30 01:30:00",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.127",
      "outcome": "Success",
      "request_id": "edb929e5-ae74-4415-abfa-010dd3281c0d"
    },
    {
      "id": 535,
      "principal_id": 9,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-09 10:30:12",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.88",
      "outcome": "Success",
      "request_id": "3a7b4865-160f-41cb-be42-533837c4bb0c"
    },
    {
      "id": 536,
      "principal_id": 41,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-06-09 08:30:24",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "198.51.100.245",
      "outcome": "Success",
      "request_id": "c5c4b17e-b092-4ab5-a707-1805b05bd825"
    },
    {
      "id": 537,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-10 20:55:19",
      "operation": "keys.ScheduleKeyDeletion",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.82",
      "outcome": "Success",
      "request_id": "d7998c87-14ea-4eca-8d93-6b0bfaac6988"
    },
    {
      "id": 538,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-16 10:40:36",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.19",
      "outcome": "ValidationError",
      "request_id": "415b7437-0b9e-439b-b295-02e1df4a39ce"
    },
    {
      "id": 539,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-15 04:13:16",
      "operation": "identity.CreateAccessKey",
      "region": "global",
      "client": "web console",
      "source_ip": "198.51.100.80",
      "outcome": "Success",
      "request_id": "43b68f93-460b-485a-8cf9-658650215fb2"
    },
    {
      "id": 540,
      "principal_id": 40,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-27 00:51:50",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.237",
      "outcome": "Success",
      "request_id": "a2d338b5-5d80-44a0-ac4c-7c049111cb7b"
    },
    {
      "id": 541,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-16 08:35:56",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.76",
      "outcome": "Success",
      "request_id": "11b2362e-5cd7-4531-8142-1bb58a943559"
    },
    {
      "id": 542,
      "principal_id": 18,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-19 16:13:36",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "198.51.100.112",
      "outcome": "Success",
      "request_id": "449cf691-4993-45b6-9efd-4049d3c06f28"
    },
    {
      "id": 543,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-17 15:18:02",
      "operation": "billing.GetCostReport",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "198.51.100.242",
      "outcome": "Success",
      "request_id": "1928eaee-8f91-4d3d-b6c1-5fca545d719b"
    },
    {
      "id": 544,
      "principal_id": 56,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-07 03:41:42",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.54",
      "outcome": "Success",
      "request_id": "6bf6d65d-c5eb-44b2-82cf-124253238699"
    },
    {
      "id": 545,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-18 02:47:01",
      "operation": "compute.DescribeInstances",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.213",
      "outcome": "Success",
      "request_id": "f34f8941-2db8-47a7-93c5-7bd41c4ae528"
    },
    {
      "id": 546,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-24 21:23:47",
      "operation": "storage.ListBuckets",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "198.51.100.106",
      "outcome": "Success",
      "request_id": "e608f3bd-5904-4b2f-aeb7-abf4eadb66d9"
    },
    {
      "id": 547,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-27 10:33:10",
      "operation": "keys.Decrypt",
      "region": "global",
      "client": "SDK",
      "source_ip": "198.51.100.248",
      "outcome": "Success",
      "request_id": "0854587d-d245-4bc7-bb3a-4b9957246c94"
    },
    {
      "id": 548,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-11 04:46:58",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.127",
      "outcome": "Success",
      "request_id": "c1a0c618-e7df-42cf-a400-21ed0af886c6"
    },
    {
      "id": 549,
      "principal_id": 16,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-20 11:52:01",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.182",
      "outcome": "Success",
      "request_id": "9fe79b72-a704-4e7c-b598-21d2efef20ae"
    },
    {
      "id": 550,
      "principal_id": 1,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-05-13 01:24:40",
      "operation": "audit.StopLogging",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.122",
      "outcome": "Success",
      "request_id": "7a3bc5b7-0cfb-4d61-8c4b-c54c96f5acfa"
    },
    {
      "id": 551,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-23 13:28:46",
      "operation": "storage.PutObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.244",
      "outcome": "Success",
      "request_id": "e7d21f9e-9437-4fb7-8b1c-2cfaa65d7977"
    },
    {
      "id": 552,
      "principal_id": 55,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-27 07:13:46",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "198.51.100.121",
      "outcome": "Success",
      "request_id": "35553e7f-8099-49d0-8c6f-b953027400a9"
    },
    {
      "id": 553,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-04 21:45:19",
      "operation": "storage.ListBuckets",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.154",
      "outcome": "Success",
      "request_id": "cb9df1c6-9ae9-4dd0-8bfd-441cd189b134"
    },
    {
      "id": 554,
      "principal_id": 35,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-16 15:44:07",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.43",
      "outcome": "AccessDenied",
      "request_id": "b9e340b0-f050-4761-bc75-009b4fde7adb"
    },
    {
      "id": 555,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-18 03:53:52",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "internal service",
      "source_ip": "198.51.100.4",
      "outcome": "Success",
      "request_id": "2eebc138-eae5-4afe-b5d9-63c0b36e88b1"
    },
    {
      "id": 556,
      "principal_id": 61,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-04-05 01:46:56",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.87",
      "outcome": "Success",
      "request_id": "cf62cd3c-f9b1-4a41-8b09-3742030b64ae"
    },
    {
      "id": 557,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-26 05:37:06",
      "operation": "network.OpenIngressRule",
      "region": "global",
      "client": "internal service",
      "source_ip": "198.51.100.63",
      "outcome": "Success",
      "request_id": "d7e80ca2-123e-4982-9212-3d047cfc2c9d"
    },
    {
      "id": 558,
      "principal_id": 35,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-03-18 11:15:56",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.156",
      "outcome": "Success",
      "request_id": "e8c5f2fb-350f-490d-9117-b59867107d7f"
    },
    {
      "id": 559,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-21 01:46:26",
      "operation": "storage.PutObject",
      "region": "global",
      "client": "web console",
      "source_ip": "198.51.100.32",
      "outcome": "Success",
      "request_id": "b5e294b0-c59a-4a47-a47d-de17ceb11559"
    },
    {
      "id": 560,
      "principal_id": 20,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-05-03 18:32:21",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "web console",
      "source_ip": "192.0.2.98",
      "outcome": "Success",
      "request_id": "231d0472-2b90-4b39-b12d-ab2ba5d48a77"
    },
    {
      "id": 561,
      "principal_id": 26,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-02-19 12:34:01",
      "operation": "compute.StartInstance",
      "region": "us-1",
      "client": "web console",
      "source_ip": "192.0.2.248",
      "outcome": "Success",
      "request_id": "03a323ac-e6ac-400d-93f8-1d1dbe4262a0"
    },
    {
      "id": 562,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-29 00:10:36",
      "operation": "storage.PutObject",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.192",
      "outcome": "Success",
      "request_id": "2bf33b12-5648-450f-93db-339f4f232ecb"
    },
    {
      "id": 563,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-03-29 20:43:18",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.39",
      "outcome": "Success",
      "request_id": "eb43cd44-9617-4ceb-be31-05fc9e0a11eb"
    },
    {
      "id": 564,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-07 00:08:50",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "internal service",
      "source_ip": "203.0.113.10",
      "outcome": "AccessDenied",
      "request_id": "0d26af08-94db-46c8-b6e2-19693b1bae14"
    },
    {
      "id": 565,
      "principal_id": 34,
      "account_id": 6,
      "provider": "aws",
      "event_time": "2026-04-12 02:01:32",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "SDK",
      "source_ip": "203.0.113.166",
      "outcome": "Success",
      "request_id": "866da6ba-0272-4f02-9c41-c552bebbbab1"
    },
    {
      "id": 566,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-27 20:31:22",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "203.0.113.147",
      "outcome": "Success",
      "request_id": "754c8aa6-9572-4f0e-9a54-0d9b93cb03e7"
    },
    {
      "id": 567,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-19 19:24:32",
      "operation": "compute.StartInstance",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "192.0.2.218",
      "outcome": "AccessDenied",
      "request_id": "19a8a3d5-4cd0-436c-9f9e-0a3721aa2c82"
    },
    {
      "id": 568,
      "principal_id": 24,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-21 19:32:41",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "203.0.113.249",
      "outcome": "NotFound",
      "request_id": "8dc98e33-635a-493f-93d5-464d152662c6"
    },
    {
      "id": 569,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-10 21:52:54",
      "operation": "storage.GetObject",
      "region": "us-1",
      "client": "command line",
      "source_ip": "198.51.100.16",
      "outcome": "Success",
      "request_id": "fbdc5bd7-065f-4ebd-a760-6406c1ea5083"
    },
    {
      "id": 570,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-27 05:48:57",
      "operation": "audit.StopLogging",
      "region": "global",
      "client": "command line",
      "source_ip": "192.0.2.92",
      "outcome": "Success",
      "request_id": "c15718c4-6cba-4ec1-8527-23e241679e4a"
    },
    {
      "id": 571,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-18 19:42:06",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.6",
      "outcome": "Success",
      "request_id": "ff37633a-a3dc-4d44-ab56-bbc266f3c320"
    },
    {
      "id": 572,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-02-04 11:23:29",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "198.51.100.130",
      "outcome": "Success",
      "request_id": "a94fa8ec-3e26-41b4-9517-278e4d494332"
    },
    {
      "id": 573,
      "principal_id": 28,
      "account_id": 12,
      "provider": "azure",
      "event_time": "2026-03-03 15:18:07",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "192.0.2.241",
      "outcome": "Success",
      "request_id": "4493b4cc-a012-4fa7-b330-c68b03528d55"
    },
    {
      "id": 574,
      "principal_id": 23,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-03-21 18:29:57",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "192.0.2.58",
      "outcome": "Success",
      "request_id": "6d2dd6df-fa61-47a0-b4c0-004a83c1ef0a"
    },
    {
      "id": 575,
      "principal_id": 49,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-05-29 11:29:08",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "web console",
      "source_ip": "192.0.2.29",
      "outcome": "Success",
      "request_id": "18f80af4-7757-4385-8615-e52f5e470c64"
    },
    {
      "id": 576,
      "principal_id": 46,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-10 16:06:43",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "203.0.113.63",
      "outcome": "ValidationError",
      "request_id": "a4649688-bd8d-476e-889e-3ca33350bac0"
    },
    {
      "id": 577,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-20 22:06:28",
      "operation": "storage.SetBucketPolicy",
      "region": "global",
      "client": "command line",
      "source_ip": "192.0.2.64",
      "outcome": "Success",
      "request_id": "e91a5890-3b27-4be1-a086-0fd9bee1f82d"
    },
    {
      "id": 578,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-22 19:05:56",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "SDK",
      "source_ip": "203.0.113.32",
      "outcome": "AccessDenied",
      "request_id": "0aa9a6b2-c6dc-4f0c-adba-5fb75df481cb"
    },
    {
      "id": 579,
      "principal_id": 2,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-03-10 17:04:28",
      "operation": "storage.PutObject",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "203.0.113.29",
      "outcome": "Success",
      "request_id": "da9cf3ca-e327-44f3-91c4-38cae3587bc1"
    },
    {
      "id": 580,
      "principal_id": 30,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-06-07 07:44:23",
      "operation": "billing.GetCostReport",
      "region": "us-2",
      "client": "web console",
      "source_ip": "203.0.113.181",
      "outcome": "Success",
      "request_id": "3efea2ac-16a6-4b0d-ae0a-23cfe5b2b08f"
    },
    {
      "id": 581,
      "principal_id": 54,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-03-10 17:08:20",
      "operation": "compute.DescribeInstances",
      "region": "ap-1",
      "client": "internal service",
      "source_ip": "203.0.113.30",
      "outcome": "AccessDenied",
      "request_id": "ee5285f5-af6a-46d9-ae3b-599e3efd0cc5"
    },
    {
      "id": 582,
      "principal_id": 15,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-04-07 18:53:36",
      "operation": "storage.GetObject",
      "region": "us-2",
      "client": "command line",
      "source_ip": "203.0.113.107",
      "outcome": "Success",
      "request_id": "10fdad6c-58d3-4d35-a282-8c802ae467dc"
    },
    {
      "id": 583,
      "principal_id": 47,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-09 01:44:13",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.235",
      "outcome": "Success",
      "request_id": "437ba61a-4463-4817-94cc-4ecba2375e5c"
    },
    {
      "id": 584,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-29 15:55:56",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "203.0.113.66",
      "outcome": "Success",
      "request_id": "b7ee69e9-62c1-49a5-9ecd-3513840cb7cf"
    },
    {
      "id": 585,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-22 13:41:34",
      "operation": "storage.ListBuckets",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "198.51.100.228",
      "outcome": "Success",
      "request_id": "829e2420-5e81-43c9-ab2c-2928489633c7"
    },
    {
      "id": 586,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-02-05 16:03:57",
      "operation": "keys.Decrypt",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.213",
      "outcome": "Success",
      "request_id": "d6abc317-55ea-45f7-89e7-297130df47c2"
    },
    {
      "id": 587,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-23 01:24:22",
      "operation": "billing.GetCostReport",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.231",
      "outcome": "Success",
      "request_id": "4b9b14cd-31ad-4f8f-90c1-44d1b43f1b56"
    },
    {
      "id": 588,
      "principal_id": 5,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-27 20:26:33",
      "operation": "storage.ListBuckets",
      "region": "global",
      "client": "internal service",
      "source_ip": "203.0.113.179",
      "outcome": "Success",
      "request_id": "d92c08ba-8263-4ebf-a94f-3d2093629c38"
    },
    {
      "id": 589,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-23 22:14:48",
      "operation": "storage.GetObject",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "203.0.113.69",
      "outcome": "Success",
      "request_id": "19f12ca9-1780-4d8a-86d2-b556ef91c870"
    },
    {
      "id": 590,
      "principal_id": 25,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-03-09 16:07:12",
      "operation": "compute.DescribeInstances",
      "region": "global",
      "client": "internal service",
      "source_ip": "192.0.2.153",
      "outcome": "Success",
      "request_id": "b8e55473-aa70-4d8d-92ba-10b2aa8082c4"
    },
    {
      "id": 591,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-04-30 01:20:45",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "SDK",
      "source_ip": "203.0.113.88",
      "outcome": "Success",
      "request_id": "41fe6265-b8ce-4bf8-8374-075c84d0d401"
    },
    {
      "id": 592,
      "principal_id": 19,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-23 16:10:02",
      "operation": "identity.ListRoles",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "198.51.100.131",
      "outcome": "Success",
      "request_id": "fbf03f8f-5e19-40d4-9e03-8e929f38b360"
    },
    {
      "id": 593,
      "principal_id": 29,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-03-26 17:33:51",
      "operation": "storage.PutObject",
      "region": "ap-1",
      "client": "SDK",
      "source_ip": "203.0.113.114",
      "outcome": "ValidationError",
      "request_id": "1e33083d-eab6-480f-9232-9411d5673735"
    },
    {
      "id": 594,
      "principal_id": 38,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-05-01 12:17:03",
      "operation": "billing.GetCostReport",
      "region": "global",
      "client": "internal service",
      "source_ip": "203.0.113.184",
      "outcome": "Success",
      "request_id": "15a30a6e-4b8f-46e9-8efc-c9810f47d4f8"
    },
    {
      "id": 595,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-02-06 03:19:51",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "command line",
      "source_ip": "192.0.2.238",
      "outcome": "Success",
      "request_id": "75a1d529-a5d9-43b1-bdbd-6f00a0b6414c"
    },
    {
      "id": 596,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-02-07 22:15:51",
      "operation": "identity.ListRoles",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.210",
      "outcome": "Success",
      "request_id": "57fe4876-e1c5-4f53-b3c5-0184c0600852"
    },
    {
      "id": 597,
      "principal_id": 39,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-11 03:57:00",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "203.0.113.228",
      "outcome": "Success",
      "request_id": "e88112e4-741b-4784-bf0b-ea90b018c8ce"
    },
    {
      "id": 598,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-20 14:24:43",
      "operation": "billing.GetCostReport",
      "region": "eu-2",
      "client": "web console",
      "source_ip": "203.0.113.247",
      "outcome": "Success",
      "request_id": "851531ba-0a6d-43e0-812a-59860ca38dc5"
    },
    {
      "id": 599,
      "principal_id": 49,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-05-29 22:05:38",
      "operation": "audit.StopLogging",
      "region": "global",
      "client": "infrastructure as code",
      "source_ip": "198.51.100.250",
      "outcome": "Success",
      "request_id": "199fc52e-9ee0-4230-9253-d0e8128392b7"
    },
    {
      "id": 600,
      "principal_id": 7,
      "account_id": 7,
      "provider": "aws",
      "event_time": "2026-03-17 18:27:16",
      "operation": "audit.StopLogging",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.146",
      "outcome": "Success",
      "request_id": "63c52eee-9059-45a2-b1af-63ac0e3f784d"
    },
    {
      "id": 601,
      "principal_id": 33,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-02-24 17:06:06",
      "operation": "storage.ListBuckets",
      "region": "us-2",
      "client": "internal service",
      "source_ip": "192.0.2.147",
      "outcome": "Success",
      "request_id": "b5b6100e-9cce-4c93-a3fb-c7d93febbce1"
    },
    {
      "id": 602,
      "principal_id": 31,
      "account_id": 2,
      "provider": "azure",
      "event_time": "2026-04-23 00:02:15",
      "operation": "storage.GetObject",
      "region": "global",
      "client": "command line",
      "source_ip": "203.0.113.162",
      "outcome": "Success",
      "request_id": "9bf5fddb-243f-4e97-8b74-340a5bf9834f"
    },
    {
      "id": 603,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-24 22:25:04",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.112",
      "outcome": "Success",
      "request_id": "b9a2a856-8854-458c-8b4a-c7af48679849"
    },
    {
      "id": 604,
      "principal_id": 52,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-21 03:42:02",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "internal service",
      "source_ip": "192.0.2.210",
      "outcome": "Success",
      "request_id": "d584b651-4e32-49a3-aa27-04ea4b770b76"
    },
    {
      "id": 605,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-01 20:51:57",
      "operation": "storage.ListBuckets",
      "region": "eu-2",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.193",
      "outcome": "Success",
      "request_id": "499c2ac5-20d0-4d7a-937f-fdf3a8512a17"
    },
    {
      "id": 606,
      "principal_id": 27,
      "account_id": 5,
      "provider": "azure",
      "event_time": "2026-04-27 06:59:04",
      "operation": "identity.CreateAccessKey",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "198.51.100.31",
      "outcome": "Success",
      "request_id": "33bc8933-ac3c-4b74-a513-1b3dca321240"
    },
    {
      "id": 607,
      "principal_id": 57,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-05-24 00:11:37",
      "operation": "compute.DescribeInstances",
      "region": "eu-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.41",
      "outcome": "Success",
      "request_id": "b9d6f5d8-d248-4dc2-9ac3-03456679d32b"
    },
    {
      "id": 608,
      "principal_id": 54,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-03-11 17:59:13",
      "operation": "compute.DescribeInstances",
      "region": "us-1",
      "client": "infrastructure as code",
      "source_ip": "203.0.113.135",
      "outcome": "Success",
      "request_id": "9bd7128c-3a58-403f-b97f-95a0f8531a5c"
    },
    {
      "id": 609,
      "principal_id": 12,
      "account_id": 8,
      "provider": "aws",
      "event_time": "2026-03-25 17:35:56",
      "operation": "billing.GetCostReport",
      "region": "eu-1",
      "client": "web console",
      "source_ip": "192.0.2.71",
      "outcome": "Success",
      "request_id": "305f57ff-9ec5-4501-b0cd-a6af3822f77c"
    },
    {
      "id": 610,
      "principal_id": 44,
      "account_id": 11,
      "provider": "aws",
      "event_time": "2026-02-11 17:01:29",
      "operation": "identity.ListRoles",
      "region": "global",
      "client": "SDK",
      "source_ip": "203.0.113.120",
      "outcome": "AccessDenied",
      "request_id": "b33cfdac-42e5-411e-83d8-f7e7d5510898"
    },
    {
      "id": 611,
      "principal_id": 50,
      "account_id": 9,
      "provider": "aws",
      "event_time": "2026-01-09 04:29:57",
      "operation": "storage.GetObject",
      "region": "eu-2",
      "client": "internal service",
      "source_ip": "192.0.2.131",
      "outcome": "Success",
      "request_id": "dce07590-8cfa-4a35-8eed-43f7ba20d602"
    },
    {
      "id": 612,
      "principal_id": 4,
      "account_id": 1,
      "provider": "aws",
      "event_time": "2026-02-23 01:09:34",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "SDK",
      "source_ip": "192.0.2.135",
      "outcome": "Success",
      "request_id": "57e7b615-baf4-4e2c-b302-0abea8745a03"
    },
    {
      "id": 613,
      "principal_id": 36,
      "account_id": 3,
      "provider": "azure",
      "event_time": "2026-02-08 14:40:33",
      "operation": "compute.DescribeInstances",
      "region": "eu-2",
      "client": "command line",
      "source_ip": "198.51.100.245",
      "outcome": "Throttled",
      "request_id": "a22c8b56-aad3-41fa-a314-facaed5b99ea"
    },
    {
      "id": 614,
      "principal_id": 13,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-03-24 16:29:44",
      "operation": "audit.DeleteTrail",
      "region": "ap-1",
      "client": "command line",
      "source_ip": "198.51.100.105",
      "outcome": "Success",
      "request_id": "4817190c-8ede-4958-8507-a1c3985a6494"
    },
    {
      "id": 615,
      "principal_id": 16,
      "account_id": 10,
      "provider": "azure",
      "event_time": "2026-04-20 23:24:01",
      "operation": "keys.Decrypt",
      "region": "us-1",
      "client": "command line",
      "source_ip": "203.0.113.18",
      "outcome": "Throttled",
      "request_id": "cf7c25a4-69ea-4c14-8f61-dc67596aaf60"
    },
    {
      "id": 616,
      "principal_id": 43,
      "account_id": 4,
      "provider": "aws",
      "event_time": "2026-04-04 18:34:12",
      "operation": "storage.GetObject",
      "region": "eu-1",
      "client": "command line",
      "source_ip": "198.51.100.120",
      "outcome": "Success",
      "request_id": "7aa11013-fa90-4418-a911-8f17af1fa351"
    }
  ]
}