[ { "model": "app.cloudaccount", "pk": 1, "fields": { "provider": "aws", "aws_account_id": "802411915824", "azure_subscription_id": null, "workload": "partner-api", "environment": "staging" } }, { "model": "app.cloudaccount", "pk": 2, "fields": { "provider": "azure", "aws_account_id": null, "azure_subscription_id": "2e1ac955-caab-42b2-8d38-b8a4e0021f51", "workload": "web-storefront", "environment": "development" } }, { "model": "app.cloudaccount", "pk": 3, "fields": { "provider": "azure", "aws_account_id": null, "azure_subscription_id": "d5b69e7d-639a-4ad5-9a96-fc0e74eefdb5", "workload": "shared-network", "environment": "production" } }, { "model": "app.cloudaccount", "pk": 4, "fields": { "provider": "aws", "aws_account_id": "087170051708", "azure_subscription_id": null, "workload": "payments", "environment": "production" } }, { "model": "app.cloudaccount", "pk": 5, "fields": { "provider": "azure", "aws_account_id": null, "azure_subscription_id": "54b581f3-8add-40e2-a187-55988dd152c4", "workload": "data-lake", "environment": "development" } }, { "model": "app.cloudaccount", "pk": 6, "fields": { "provider": "aws", "aws_account_id": "950234366577", "azure_subscription_id": null, "workload": "mobile-backend", "environment": "production" } }, { "model": "app.cloudaccount", "pk": 7, "fields": { "provider": "aws", "aws_account_id": "488204354178", "azure_subscription_id": null, "workload": "central-logging", "environment": "production" } }, { "model": "app.cloudaccount", "pk": 8, "fields": { "provider": "aws", "aws_account_id": "080732898278", "azure_subscription_id": null, "workload": "analytics", "environment": "development" } }, { "model": "app.cloudaccount", "pk": 9, "fields": { "provider": "aws", "aws_account_id": "808908794875", "azure_subscription_id": null, "workload": "internal-tools", "environment": "production" } }, { "model": "app.cloudaccount", "pk": 10, "fields": { "provider": "azure", "aws_account_id": null, "azure_subscription_id": "9ac3e8d9-20a3-4193-8779-c65fbe02ddc2", "workload": "identity", "environment": "development" } }, { "model": "app.cloudaccount", "pk": 11, "fields": { "provider": "aws", "aws_account_id": "570360570938", "azure_subscription_id": null, "workload": "backup", "environment": "staging" } }, { "model": "app.cloudaccount", "pk": 12, "fields": { "provider": "azure", "aws_account_id": null, "azure_subscription_id": "2d74562a-0fec-47ab-9141-6831a28d0776", "workload": "ml-training", "environment": "staging" } }, { "model": "app.principal", "pk": 1, "fields": { "account": 4, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "readonly monitoring", "created_at": "2026-04-11T17:22:38Z" } }, { "model": "app.principal", "pk": 2, "fields": { "account": 9, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "monitoring deploy", "created_at": "2026-03-04T14:23:00Z" } }, { "model": "app.principal", "pk": 3, "fields": { "account": 6, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "platform ingest", "created_at": "2026-05-15T10:05:12Z" } }, { "model": "app.principal", "pk": 4, "fields": { "account": 1, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "monitoring pipeline", "created_at": "2026-02-14T08:25:44Z" } }, { "model": "app.principal", "pk": 5, "fields": { "account": 4, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "pipeline scheduler", "created_at": "2026-04-23T11:57:33Z" } }, { "model": "app.principal", "pk": 6, "fields": { "account": 12, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "backup ingest", "created_at": "2026-01-25T09:46:46Z" } }, { "model": "app.principal", "pk": 7, "fields": { "account": 7, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "backup terraform", "created_at": "2026-02-28T16:42:16Z" } }, { "model": "app.principal", "pk": 8, "fields": { "account": 6, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "deploy monitoring", "created_at": "2026-02-21T15:22:13Z" } }, { "model": "app.principal", "pk": 9, "fields": { "account": 2, "provider": "azure", "principal_type": "service identity", "user_email": null, "role_name": "export monitoring", "created_at": "2026-03-22T10:57:45Z" } }, { "model": "app.principal", "pk": 10, "fields": { "account": 5, "provider": "azure", "principal_type": "human user", "user_email": "delfina.kozey-schaden@example.org", "role_name": null, "created_at": "2026-03-15T17:09:32Z" } }, { "model": "app.principal", "pk": 11, "fields": { "account": 3, "provider": "azure", "principal_type": "service identity", "user_email": null, "role_name": "pipeline deploy", "created_at": "2026-05-24T10:06:16Z" } }, { "model": "app.principal", "pk": 12, "fields": { "account": 8, "provider": "aws", "principal_type": "human user", "user_email": "jaquelin_willms62@example.net", "role_name": null, "created_at": "2026-03-02T14:41:05Z" } }, { "model": "app.principal", "pk": 13, "fields": { "account": 10, "provider": "azure", "principal_type": "human user", "user_email": "jaiden.botsford@example.com", "role_name": null, "created_at": "2026-02-22T08:11:20Z" } }, { "model": "app.principal", "pk": 14, "fields": { "account": 10, "provider": "azure", "principal_type": "service identity", "user_email": null, "role_name": "pipeline terraform", "created_at": "2026-01-31T07:02:26Z" } }, { "model": "app.principal", "pk": 15, "fields": { "account": 7, "provider": "aws", "principal_type": "human user", "user_email": "carrie_haag@example.org", "role_name": null, "created_at": "2026-03-28T11:17:54Z" } }, { "model": "app.principal", "pk": 16, "fields": { "account": 10, "provider": "azure", "principal_type": "human user", "user_email": "lloyd.jakubowski68@example.org", "role_name": null, "created_at": "2026-04-17T18:36:48Z" } }, { "model": "app.principal", "pk": 17, "fields": { "account": 11, "provider": "aws", "principal_type": "break-glass admin", "user_email": "sylvia.ebert70@example.net", "role_name": null, "created_at": "2026-05-05T10:38:29Z" } }, { "model": "app.principal", "pk": 18, "fields": { "account": 3, "provider": "azure", "principal_type": "human user", "user_email": "dannie_balistreri9@example.com", "role_name": null, "created_at": "2026-05-01T08:20:36Z" } }, { "model": "app.principal", "pk": 19, "fields": { "account": 5, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "backup export", "created_at": "2026-02-14T11:26:09Z" } }, { "model": "app.principal", "pk": 20, "fields": { "account": 5, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "platform billing", "created_at": "2026-04-08T16:45:54Z" } }, { "model": "app.principal", "pk": 21, "fields": { "account": 8, "provider": "aws", "principal_type": "human user", "user_email": "elian.koch63@example.com", "role_name": null, "created_at": "2026-04-25T16:48:55Z" } }, { "model": "app.principal", "pk": 22, "fields": { "account": 4, "provider": "aws", "principal_type": "human user", "user_email": "oda_buckridge46@example.org", "role_name": null, "created_at": "2026-04-10T17:56:01Z" } }, { "model": "app.principal", "pk": 23, "fields": { "account": 2, "provider": "azure", "principal_type": "service identity", "user_email": null, "role_name": "scheduler readonly", "created_at": "2026-02-07T11:05:42Z" } }, { "model": "app.principal", "pk": 24, "fields": { "account": 12, "provider": "azure", "principal_type": "human user", "user_email": "donnie_littel@example.com", "role_name": null, "created_at": "2026-03-07T10:22:16Z" } }, { "model": "app.principal", "pk": 25, "fields": { "account": 1, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "scheduler readonly", "created_at": "2026-02-06T10:54:15Z" } }, { "model": "app.principal", "pk": 26, "fields": { "account": 12, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "export ingest", "created_at": "2026-02-13T13:15:47Z" } }, { "model": "app.principal", "pk": 27, "fields": { "account": 5, "provider": "azure", "principal_type": "human user", "user_email": "joel_barrows21@example.net", "role_name": null, "created_at": "2026-03-26T16:33:39Z" } }, { "model": "app.principal", "pk": 28, "fields": { "account": 12, "provider": "azure", "principal_type": "human user", "user_email": "shelly.tillman@example.org", "role_name": null, "created_at": "2026-02-18T14:46:32Z" } }, { "model": "app.principal", "pk": 29, "fields": { "account": 5, "provider": "azure", "principal_type": "human user", "user_email": "onie_purdy91@example.net", "role_name": null, "created_at": "2026-02-27T13:15:41Z" } }, { "model": "app.principal", "pk": 30, "fields": { "account": 2, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "billing readonly", "created_at": "2026-05-09T08:55:20Z" } }, { "model": "app.principal", "pk": 31, "fields": { "account": 2, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "platform billing", "created_at": "2026-03-16T11:52:29Z" } }, { "model": "app.principal", "pk": 32, "fields": { "account": 7, "provider": "aws", "principal_type": "human user", "user_email": "marques_kertzmann10@example.net", "role_name": null, "created_at": "2026-03-19T16:57:13Z" } }, { "model": "app.principal", "pk": 33, "fields": { "account": 5, "provider": "azure", "principal_type": "service identity", "user_email": null, "role_name": "terraform backup", "created_at": "2026-02-19T17:57:00Z" } }, { "model": "app.principal", "pk": 34, "fields": { "account": 6, "provider": "aws", "principal_type": "human user", "user_email": "laney_ondricka64@example.com", "role_name": null, "created_at": "2026-04-03T14:44:49Z" } }, { "model": "app.principal", "pk": 35, "fields": { "account": 6, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "export terraform", "created_at": "2026-03-06T18:30:09Z" } }, { "model": "app.principal", "pk": 36, "fields": { "account": 3, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "pipeline scheduler", "created_at": "2026-01-07T15:11:24Z" } }, { "model": "app.principal", "pk": 37, "fields": { "account": 8, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "scheduler deploy", "created_at": "2026-01-20T16:24:14Z" } }, { "model": "app.principal", "pk": 38, "fields": { "account": 1, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "ingest monitoring", "created_at": "2026-03-27T10:11:12Z" } }, { "model": "app.principal", "pk": 39, "fields": { "account": 1, "provider": "aws", "principal_type": "human user", "user_email": "deshawn_sporer75@example.org", "role_name": null, "created_at": "2026-01-14T10:39:22Z" } }, { "model": "app.principal", "pk": 40, "fields": { "account": 5, "provider": "azure", "principal_type": "human user", "user_email": "guido.herzog90@example.net", "role_name": null, "created_at": "2026-03-23T09:46:54Z" } }, { "model": "app.principal", "pk": 41, "fields": { "account": 8, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "scheduler reporting", "created_at": "2026-05-24T10:43:24Z" } }, { "model": "app.principal", "pk": 42, "fields": { "account": 2, "provider": "azure", "principal_type": "service identity", "user_email": null, "role_name": "scheduler billing", "created_at": "2026-01-24T09:57:15Z" } }, { "model": "app.principal", "pk": 43, "fields": { "account": 4, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "billing reporting", "created_at": "2026-03-09T09:19:23Z" } }, { "model": "app.principal", "pk": 44, "fields": { "account": 11, "provider": "aws", "principal_type": "human user", "user_email": "torrey.bruen61@example.com", "role_name": null, "created_at": "2026-01-25T13:58:05Z" } }, { "model": "app.principal", "pk": 45, "fields": { "account": 1, "provider": "aws", "principal_type": "human user", "user_email": "alexys.thiel@example.net", "role_name": null, "created_at": "2026-02-04T10:34:27Z" } }, { "model": "app.principal", "pk": 46, "fields": { "account": 2, "provider": "azure", "principal_type": "human user", "user_email": "jo_rippin@example.org", "role_name": null, "created_at": "2026-05-26T15:13:10Z" } }, { "model": "app.principal", "pk": 47, "fields": { "account": 2, "provider": "azure", "principal_type": "human user", "user_email": "gaetano_jones45@example.net", "role_name": null, "created_at": "2026-03-11T20:49:54Z" } }, { "model": "app.principal", "pk": 48, "fields": { "account": 6, "provider": "aws", "principal_type": "break-glass admin", "user_email": "mollie_pagac@example.com", "role_name": null, "created_at": "2026-01-27T12:08:52Z" } }, { "model": "app.principal", "pk": 49, "fields": { "account": 9, "provider": "aws", "principal_type": "human user", "user_email": "marisa.lynch98@example.com", "role_name": null, "created_at": "2026-05-22T14:30:05Z" } }, { "model": "app.principal", "pk": 50, "fields": { "account": 9, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "ingest billing", "created_at": "2026-01-05T17:02:35Z" } }, { "model": "app.principal", "pk": 51, "fields": { "account": 5, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "reporting deploy", "created_at": "2026-04-17T14:29:57Z" } }, { "model": "app.principal", "pk": 52, "fields": { "account": 11, "provider": "aws", "principal_type": "service identity", "user_email": null, "role_name": "pipeline terraform", "created_at": "2026-01-28T12:58:24Z" } }, { "model": "app.principal", "pk": 53, "fields": { "account": 10, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "export ingest", "created_at": "2026-02-14T14:36:22Z" } }, { "model": "app.principal", "pk": 54, "fields": { "account": 3, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "reporting terraform", "created_at": "2026-03-04T10:38:33Z" } }, { "model": "app.principal", "pk": 55, "fields": { "account": 6, "provider": "aws", "principal_type": "human user", "user_email": "kasandra.veum-damore@example.com", "role_name": null, "created_at": "2026-04-15T10:10:09Z" } }, { "model": "app.principal", "pk": 56, "fields": { "account": 10, "provider": "azure", "principal_type": "human user", "user_email": "karson_balistreri0@example.net", "role_name": null, "created_at": "2026-03-25T10:36:35Z" } }, { "model": "app.principal", "pk": 57, "fields": { "account": 3, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "readonly monitoring", "created_at": "2026-05-10T16:24:56Z" } }, { "model": "app.principal", "pk": 58, "fields": { "account": 1, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "pipeline export", "created_at": "2026-02-12T20:49:04Z" } }, { "model": "app.principal", "pk": 59, "fields": { "account": 3, "provider": "azure", "principal_type": "assumed role", "user_email": null, "role_name": "ingest scheduler", "created_at": "2026-04-10T09:19:42Z" } }, { "model": "app.principal", "pk": 60, "fields": { "account": 2, "provider": "azure", "principal_type": "human user", "user_email": "toni.hintz67@example.com", "role_name": null, "created_at": "2026-02-21T13:51:56Z" } }, { "model": "app.principal", "pk": 61, "fields": { "account": 8, "provider": "aws", "principal_type": "assumed role", "user_email": null, "role_name": "platform billing", "created_at": "2026-03-19T11:38:46Z" } }, { "model": "app.apicall", "pk": 1, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-21T21:54:55Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "internal service", "source_ip": "198.51.100.53", "outcome": "Success", "request_id": "f695cfae-4ce6-43df-a598-ca3f9ebbda90" } }, { "model": "app.apicall", "pk": 2, "fields": { "principal": 8, "account_id": 6, "provider": "aws", "event_time": "2026-02-22T14:52:58Z", "operation": "storage.GetObject", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.215", "outcome": "Success", "request_id": "567b2c4a-1ab5-49a5-a0dc-181d6d557efa" } }, { "model": "app.apicall", "pk": 3, "fields": { "principal": 45, "account_id": 1, "provider": "aws", "event_time": "2026-02-06T20:02:06Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "internal service", "source_ip": "203.0.113.81", "outcome": "Success", "request_id": "35493cc9-7b66-40ce-9d81-74c77d0f71ed" } }, { "model": "app.apicall", "pk": 4, "fields": { "principal": 58, "account_id": 1, "provider": "aws", "event_time": "2026-02-15T02:38:51Z", "operation": "identity.CreateUser", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.17", "outcome": "AccessDenied", "request_id": "a18bf2c6-2ed6-41bb-b0cf-4bfaef5b811b" } }, { "model": "app.apicall", "pk": 5, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-15T22:20:51Z", "operation": "storage.GetObject", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.140", "outcome": "Success", "request_id": "35e9f9e4-2634-4606-8a59-c924e068e5ef" } }, { "model": "app.apicall", "pk": 6, "fields": { "principal": 60, "account_id": 2, "provider": "azure", "event_time": "2026-02-22T03:30:56Z", "operation": "compute.StartInstance", "region": "eu-2", "client": "SDK", "source_ip": "198.51.100.82", "outcome": "Success", "request_id": "d699d528-9c55-449c-8bc8-b260ff8388a2" } }, { "model": "app.apicall", "pk": 7, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-07T21:03:38Z", "operation": "billing.GetCostReport", "region": "ap-1", "client": "infrastructure as code", "source_ip": "203.0.113.2", "outcome": "Success", "request_id": "d55b0014-7278-4ca9-93e4-f80c25c40e03" } }, { "model": "app.apicall", "pk": 8, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-01-25T04:45:58Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.224", "outcome": "Success", "request_id": "565a4880-debd-42b9-bfc1-532d7d9d7e52" } }, { "model": "app.apicall", "pk": 9, "fields": { "principal": 35, "account_id": 6, "provider": "aws", "event_time": "2026-03-09T01:43:21Z", "operation": "identity.ListRoles", "region": "us-1", "client": "web console", "source_ip": "198.51.100.53", "outcome": "Success", "request_id": "6cffed65-1d57-407f-8978-0305a2881a77" } }, { "model": "app.apicall", "pk": 10, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-11T11:21:31Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "command line", "source_ip": "192.0.2.78", "outcome": "Success", "request_id": "5895df14-f593-4c43-9374-9d3a05d47ea2" } }, { "model": "app.apicall", "pk": 11, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-03T07:41:23Z", "operation": "identity.ListRoles", "region": "us-2", "client": "web console", "source_ip": "203.0.113.61", "outcome": "Success", "request_id": "2db2af83-141f-411c-84e1-6fd50b231de7" } }, { "model": "app.apicall", "pk": 12, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-02T01:16:30Z", "operation": "audit.StopLogging", "region": "eu-2", "client": "infrastructure as code", "source_ip": "198.51.100.98", "outcome": "Success", "request_id": "2714c726-37b7-4efc-ba25-1fb3d756120c" } }, { "model": "app.apicall", "pk": 13, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-03-28T01:43:36Z", "operation": "billing.GetCostReport", "region": "global", "client": "internal service", "source_ip": "192.0.2.98", "outcome": "Success", "request_id": "c80327da-84e6-4590-b22f-3d2c3b6c628a" } }, { "model": "app.apicall", "pk": 14, "fields": { "principal": 49, "account_id": 9, "provider": "aws", "event_time": "2026-05-23T06:08:58Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "web console", "source_ip": "198.51.100.107", "outcome": "Success", "request_id": "787f718c-4132-41f8-a210-8c99481da33c" } }, { "model": "app.apicall", "pk": 15, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-03-29T04:43:45Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "command line", "source_ip": "192.0.2.6", "outcome": "Success", "request_id": "4506edd2-c232-4330-b59c-6b6f2a1a5323" } }, { "model": "app.apicall", "pk": 16, "fields": { "principal": 8, "account_id": 6, "provider": "aws", "event_time": "2026-02-25T10:57:21Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.29", "outcome": "Success", "request_id": "a45be227-8270-4ce0-adaf-628607e60cc0" } }, { "model": "app.apicall", "pk": 17, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-10T20:01:14Z", "operation": "identity.AttachAdminPolicy", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.98", "outcome": "Success", "request_id": "495eaa39-3326-438b-a535-21ddefb57d6f" } }, { "model": "app.apicall", "pk": 18, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-01T15:27:37Z", "operation": "identity.CreateAccessKey", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.84", "outcome": "Success", "request_id": "a3a2ea5d-2e8a-47a1-bf71-053b79cb9f6b" } }, { "model": "app.apicall", "pk": 19, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-05-25T08:38:53Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "infrastructure as code", "source_ip": "192.0.2.105", "outcome": "ValidationError", "request_id": "bdde5933-400d-479c-9211-9bde3003ffe1" } }, { "model": "app.apicall", "pk": 20, "fields": { "principal": 50, "account_id": 9, "provider": "aws", "event_time": "2026-01-05T20:03:43Z", "operation": "identity.ListRoles", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.58", "outcome": "Success", "request_id": "6163f1dc-1385-480f-a057-c03267e50acd" } }, { "model": "app.apicall", "pk": 21, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-15T19:29:37Z", "operation": "compute.StartInstance", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.25", "outcome": "Success", "request_id": "ebeceb5f-50af-4405-9d60-d320d3ec7f90" } }, { "model": "app.apicall", "pk": 22, "fields": { "principal": 53, "account_id": 10, "provider": "azure", "event_time": "2026-02-15T10:19:25Z", "operation": "storage.SetBucketPolicy", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.7", "outcome": "Success", "request_id": "48979c44-6ce3-4eee-bf0b-9483d5c231c7" } }, { "model": "app.apicall", "pk": 23, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-04T06:36:11Z", "operation": "compute.DescribeInstances", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.227", "outcome": "Success", "request_id": "6d60124a-91b6-425b-91bf-c92c0a0a9118" } }, { "model": "app.apicall", "pk": 24, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-04-17T20:20:16Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.187", "outcome": "Success", "request_id": "7b292087-0b4b-4977-848d-a97b43c1d31c" } }, { "model": "app.apicall", "pk": 25, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-02-20T06:38:16Z", "operation": "compute.DeleteInstance", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.58", "outcome": "Success", "request_id": "7fa1a0b9-4703-429c-ae7a-dbcb9d474ac0" } }, { "model": "app.apicall", "pk": 26, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-01-29T17:56:51Z", "operation": "storage.PutObject", "region": "global", "client": "SDK", "source_ip": "192.0.2.157", "outcome": "Success", "request_id": "2a568d0b-81e2-400c-a0cd-4592e2465d18" } }, { "model": "app.apicall", "pk": 27, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-10T08:20:29Z", "operation": "storage.PutObject", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.103", "outcome": "Success", "request_id": "1387d924-7a79-4b42-ad5d-ff890b2decd7" } }, { "model": "app.apicall", "pk": 28, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-01T08:48:29Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "command line", "source_ip": "192.0.2.166", "outcome": "Success", "request_id": "161eaa41-72b3-4a6f-a745-fcfaf0b590bf" } }, { "model": "app.apicall", "pk": 29, "fields": { "principal": 53, "account_id": 10, "provider": "azure", "event_time": "2026-02-15T15:15:13Z", "operation": "storage.GetObject", "region": "us-2", "client": "command line", "source_ip": "198.51.100.118", "outcome": "Success", "request_id": "9d57225b-8e47-4681-ac7b-f9d7920b2606" } }, { "model": "app.apicall", "pk": 30, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-03-29T07:09:23Z", "operation": "storage.GetObject", "region": "eu-1", "client": "internal service", "source_ip": "192.0.2.3", "outcome": "Success", "request_id": "c42ebf9e-a6ab-4cab-bd16-1d230cc76ff5" } }, { "model": "app.apicall", "pk": 31, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-02-23T21:16:31Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "command line", "source_ip": "198.51.100.230", "outcome": "Success", "request_id": "3d1517d7-33b0-4137-8379-6983d3eb5188" } }, { "model": "app.apicall", "pk": 32, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-10T20:47:48Z", "operation": "audit.StopLogging", "region": "global", "client": "web console", "source_ip": "192.0.2.130", "outcome": "Success", "request_id": "e039ec5f-7edc-4032-b31a-c497b007d725" } }, { "model": "app.apicall", "pk": 33, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-04T16:15:17Z", "operation": "keys.Decrypt", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.98", "outcome": "Success", "request_id": "fe726436-15a9-4fbc-b923-0083bb13c6e2" } }, { "model": "app.apicall", "pk": 34, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-17T09:20:52Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.239", "outcome": "Success", "request_id": "51128395-088b-4a23-a76e-b5a57479537d" } }, { "model": "app.apicall", "pk": 35, "fields": { "principal": 58, "account_id": 1, "provider": "aws", "event_time": "2026-02-17T09:18:52Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.84", "outcome": "Success", "request_id": "cec2d391-af66-4e20-8863-3d52cb8eb618" } }, { "model": "app.apicall", "pk": 36, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-12T05:16:14Z", "operation": "identity.AttachAdminPolicy", "region": "eu-2", "client": "command line", "source_ip": "203.0.113.243", "outcome": "AccessDenied", "request_id": "fd05012f-3bde-4222-a21a-990be0a01d1b" } }, { "model": "app.apicall", "pk": 37, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-12T12:02:48Z", "operation": "compute.StartInstance", "region": "global", "client": "command line", "source_ip": "203.0.113.176", "outcome": "Success", "request_id": "6275a2cb-1747-4cc2-a7a5-c3e77bbbc9aa" } }, { "model": "app.apicall", "pk": 38, "fields": { "principal": 4, "account_id": 1, "provider": "aws", "event_time": "2026-02-17T04:05:56Z", "operation": "identity.CreateUser", "region": "eu-2", "client": "SDK", "source_ip": "192.0.2.129", "outcome": "AccessDenied", "request_id": "43fb7fa4-6701-4a11-a6ac-8837279fd6bd" } }, { "model": "app.apicall", "pk": 39, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-11T09:01:56Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "infrastructure as code", "source_ip": "198.51.100.160", "outcome": "Success", "request_id": "a6bf8698-d602-4c8a-a242-f3c69f7eb6ad" } }, { "model": "app.apicall", "pk": 40, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-04T08:47:50Z", "operation": "compute.StartInstance", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.232", "outcome": "Success", "request_id": "26439da1-631e-4739-a889-212dff32469b" } }, { "model": "app.apicall", "pk": 41, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-14T01:27:03Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.254", "outcome": "Success", "request_id": "43478a9b-6cbd-41af-9b31-a8217941bdea" } }, { "model": "app.apicall", "pk": 42, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-11T22:06:02Z", "operation": "billing.GetCostReport", "region": "ap-1", "client": "SDK", "source_ip": "192.0.2.211", "outcome": "Success", "request_id": "abb230e1-ac4d-43ab-9cf1-77d6b6b82abc" } }, { "model": "app.apicall", "pk": 43, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-16T17:48:26Z", "operation": "billing.GetCostReport", "region": "eu-2", "client": "web console", "source_ip": "192.0.2.19", "outcome": "Success", "request_id": "9556e5ee-c2e7-4802-86ea-d76acec11636" } }, { "model": "app.apicall", "pk": 44, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-03T06:07:17Z", "operation": "identity.CreateUser", "region": "ap-1", "client": "web console", "source_ip": "203.0.113.119", "outcome": "Success", "request_id": "5252fc0e-b637-4bf1-8523-93f025bd9c76" } }, { "model": "app.apicall", "pk": 45, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-04-19T16:44:14Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.174", "outcome": "Success", "request_id": "ae1aa29b-4474-4a29-b1da-eaccac576fd6" } }, { "model": "app.apicall", "pk": 46, "fields": { "principal": 33, "account_id": 5, "provider": "azure", "event_time": "2026-02-20T04:13:08Z", "operation": "storage.PutObject", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.34", "outcome": "Success", "request_id": "d6555cb5-3ad2-4936-b64a-e7a03d0ded31" } }, { "model": "app.apicall", "pk": 47, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-01-26T19:51:44Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "internal service", "source_ip": "203.0.113.251", "outcome": "Success", "request_id": "0a2f5a05-449f-4f74-b71d-098355f17d4d" } }, { "model": "app.apicall", "pk": 48, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-01-27T20:11:39Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.204", "outcome": "Success", "request_id": "d1572841-80c0-47e7-b4f2-29c23e5f808e" } }, { "model": "app.apicall", "pk": 49, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-14T15:58:57Z", "operation": "storage.PutObject", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.4", "outcome": "Success", "request_id": "bd5cee29-b33f-4e9c-b19b-da881cbfc93e" } }, { "model": "app.apicall", "pk": 50, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-16T14:58:45Z", "operation": "compute.StartInstance", "region": "ap-1", "client": "command line", "source_ip": "203.0.113.132", "outcome": "AccessDenied", "request_id": "0e8383ea-1103-479a-8283-ed986f1951cf" } }, { "model": "app.apicall", "pk": 51, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-05-25T15:11:58Z", "operation": "compute.StartInstance", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.153", "outcome": "Success", "request_id": "6d0812c1-44ab-4096-872b-6e81a30ba90a" } }, { "model": "app.apicall", "pk": 52, "fields": { "principal": 26, "account_id": 12, "provider": "azure", "event_time": "2026-02-15T22:29:21Z", "operation": "storage.SetBucketPolicy", "region": "eu-2", "client": "command line", "source_ip": "192.0.2.169", "outcome": "Success", "request_id": "fc453499-fde7-4390-9394-30f754fd5036" } }, { "model": "app.apicall", "pk": 53, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-10T13:06:49Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "203.0.113.110", "outcome": "Success", "request_id": "5978e2c1-954f-488a-afd6-4df33422c974" } }, { "model": "app.apicall", "pk": 54, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-06T19:01:55Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "command line", "source_ip": "192.0.2.123", "outcome": "Success", "request_id": "de59ccae-763b-401e-8536-2045e638f75f" } }, { "model": "app.apicall", "pk": 55, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-05-26T22:33:24Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.62", "outcome": "Success", "request_id": "557f2d66-a7ad-40fd-8cec-541d7f946ff8" } }, { "model": "app.apicall", "pk": 56, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-08T06:45:47Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "203.0.113.221", "outcome": "Success", "request_id": "3fc2c162-11e6-401a-a1db-173989b39786" } }, { "model": "app.apicall", "pk": 57, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-14T09:06:22Z", "operation": "compute.DescribeInstances", "region": "ap-1", "client": "infrastructure as code", "source_ip": "192.0.2.4", "outcome": "Success", "request_id": "6b09f1d0-b990-4f06-a302-9e075108fe5e" } }, { "model": "app.apicall", "pk": 58, "fields": { "principal": 53, "account_id": 10, "provider": "azure", "event_time": "2026-02-18T04:43:51Z", "operation": "keys.Decrypt", "region": "eu-2", "client": "command line", "source_ip": "192.0.2.73", "outcome": "Success", "request_id": "4817ba35-6553-44bc-a9e0-10f1c2172fa3" } }, { "model": "app.apicall", "pk": 59, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-04T08:49:47Z", "operation": "identity.AttachAdminPolicy", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.56", "outcome": "Success", "request_id": "6e123ba7-af86-45fe-b33b-194e1590b7e2" } }, { "model": "app.apicall", "pk": 60, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-03-27T19:09:15Z", "operation": "keys.Decrypt", "region": "us-2", "client": "SDK", "source_ip": "198.51.100.143", "outcome": "Success", "request_id": "abeaeeeb-8ff2-43b2-bc40-613d0364ffd6" } }, { "model": "app.apicall", "pk": 61, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-10T17:24:26Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "198.51.100.148", "outcome": "Success", "request_id": "4dc491a2-7907-4765-b4c9-e04b8a14f307" } }, { "model": "app.apicall", "pk": 62, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-10T19:16:29Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.239", "outcome": "AccessDenied", "request_id": "cf236371-33d8-478f-be3b-4777af5350a9" } }, { "model": "app.apicall", "pk": 63, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-19T12:21:52Z", "operation": "storage.PutObject", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.179", "outcome": "Success", "request_id": "49756066-e994-44f5-b5c3-d4bef265ebf5" } }, { "model": "app.apicall", "pk": 64, "fields": { "principal": 40, "account_id": 5, "provider": "azure", "event_time": "2026-03-24T01:56:02Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "command line", "source_ip": "192.0.2.226", "outcome": "NotFound", "request_id": "de8e3a28-2a2a-4670-9fbc-92c6e9f0649b" } }, { "model": "app.apicall", "pk": 65, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-14T18:51:13Z", "operation": "identity.ListRoles", "region": "us-2", "client": "web console", "source_ip": "192.0.2.124", "outcome": "Success", "request_id": "f9dd6fed-77cc-4e88-b00f-ec3e5ee20317" } }, { "model": "app.apicall", "pk": 66, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-20T03:26:06Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.143", "outcome": "Success", "request_id": "103f5b9c-b180-479e-b814-a2e3b7e776c4" } }, { "model": "app.apicall", "pk": 67, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-11T03:16:07Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.60", "outcome": "Success", "request_id": "5aef5dc6-40a0-4053-8429-54728b75693f" } }, { "model": "app.apicall", "pk": 68, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-05-28T02:09:57Z", "operation": "storage.GetObject", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.239", "outcome": "Success", "request_id": "83e84b43-97bc-4bcb-be87-7fa6eb807c24" } }, { "model": "app.apicall", "pk": 69, "fields": { "principal": 54, "account_id": 3, "provider": "azure", "event_time": "2026-03-05T08:51:10Z", "operation": "keys.Decrypt", "region": "us-1", "client": "command line", "source_ip": "192.0.2.8", "outcome": "Success", "request_id": "2d33830b-68e2-4496-9e47-654e27f69b48" } }, { "model": "app.apicall", "pk": 70, "fields": { "principal": 8, "account_id": 6, "provider": "aws", "event_time": "2026-02-25T22:44:42Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.100", "outcome": "AccessDenied", "request_id": "6083eea3-33ed-4cca-9122-355e475265ed" } }, { "model": "app.apicall", "pk": 71, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-19T14:30:06Z", "operation": "storage.PutObject", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.81", "outcome": "Success", "request_id": "3954bc65-452c-4271-801d-eafdf73fdc9f" } }, { "model": "app.apicall", "pk": 72, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-05T14:54:51Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.93", "outcome": "Success", "request_id": "a61f21be-6c41-4409-84ea-92c9977a4c88" } }, { "model": "app.apicall", "pk": 73, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-12T16:30:05Z", "operation": "keys.Decrypt", "region": "global", "client": "command line", "source_ip": "198.51.100.195", "outcome": "Success", "request_id": "80d6b03f-c19a-4616-a0a5-514f88c1a9f5" } }, { "model": "app.apicall", "pk": 74, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-03-29T10:47:46Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "SDK", "source_ip": "198.51.100.80", "outcome": "Success", "request_id": "6004876c-8b01-49d2-a31d-9e5c92449f53" } }, { "model": "app.apicall", "pk": 75, "fields": { "principal": 21, "account_id": 8, "provider": "aws", "event_time": "2026-04-28T09:36:27Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.52", "outcome": "Success", "request_id": "35d3791f-402e-4c9f-8d19-4f623a25cf74" } }, { "model": "app.apicall", "pk": 76, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-02-26T21:52:28Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.113", "outcome": "Success", "request_id": "7bab677d-1922-4cda-8dbe-1ed7e03d9b55" } }, { "model": "app.apicall", "pk": 77, "fields": { "principal": 8, "account_id": 6, "provider": "aws", "event_time": "2026-02-26T01:00:13Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "infrastructure as code", "source_ip": "198.51.100.89", "outcome": "Success", "request_id": "20abe439-99d6-4be7-b00e-a77e8c24f59a" } }, { "model": "app.apicall", "pk": 78, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-03-29T11:51:16Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "infrastructure as code", "source_ip": "192.0.2.172", "outcome": "Success", "request_id": "c57201da-3cf1-4629-9a4e-6b5424f9c279" } }, { "model": "app.apicall", "pk": 79, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-22T02:22:52Z", "operation": "storage.PutObject", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.135", "outcome": "Success", "request_id": "9ccfc551-5a68-46a5-a3cb-aea713aa6712" } }, { "model": "app.apicall", "pk": 80, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-10T06:20:28Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "command line", "source_ip": "203.0.113.216", "outcome": "Success", "request_id": "394bd1ff-c2c6-49be-b7a0-297f05968675" } }, { "model": "app.apicall", "pk": 81, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-04-21T07:08:33Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.173", "outcome": "Success", "request_id": "4fb4992a-74c2-475a-813e-ad7e29ff4ee5" } }, { "model": "app.apicall", "pk": 82, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-22T03:11:52Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.11", "outcome": "Success", "request_id": "97715339-aaff-4e98-933f-9909ffa07b6f" } }, { "model": "app.apicall", "pk": 83, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-06T06:31:09Z", "operation": "identity.AttachAdminPolicy", "region": "global", "client": "command line", "source_ip": "198.51.100.115", "outcome": "Success", "request_id": "3c33ec83-9aa0-4287-bf27-2987863ea611" } }, { "model": "app.apicall", "pk": 84, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-03-24T14:59:21Z", "operation": "compute.StartInstance", "region": "us-2", "client": "command line", "source_ip": "203.0.113.117", "outcome": "Success", "request_id": "40e5f0aa-ba12-4ba3-b8c9-52216eb73886" } }, { "model": "app.apicall", "pk": 85, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-03-25T11:25:57Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.125", "outcome": "AccessDenied", "request_id": "6e7fa5e8-631f-4ca7-ab1f-8153d773e684" } }, { "model": "app.apicall", "pk": 86, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-14T00:29:11Z", "operation": "identity.ListRoles", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.223", "outcome": "Success", "request_id": "024ec776-251a-42ec-b5f0-a55f1bb6a8a8" } }, { "model": "app.apicall", "pk": 87, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-14T04:51:10Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "internal service", "source_ip": "198.51.100.11", "outcome": "Success", "request_id": "368118dd-f659-4e5b-b668-27df3e43d54f" } }, { "model": "app.apicall", "pk": 88, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-11T02:51:26Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.227", "outcome": "Success", "request_id": "d1da32da-2b91-495b-8d96-a4adae3dc1db" } }, { "model": "app.apicall", "pk": 89, "fields": { "principal": 53, "account_id": 10, "provider": "azure", "event_time": "2026-02-20T21:33:35Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "203.0.113.46", "outcome": "Success", "request_id": "1aacc845-7fef-4db0-a840-0d7d2fa9dd04" } }, { "model": "app.apicall", "pk": 90, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-07T14:35:55Z", "operation": "identity.ListRoles", "region": "ap-1", "client": "SDK", "source_ip": "192.0.2.72", "outcome": "Success", "request_id": "e2502d12-9363-4f4e-86bf-8f06a263eccc" } }, { "model": "app.apicall", "pk": 91, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-02-27T07:04:54Z", "operation": "storage.ListBuckets", "region": "us-2", "client": "infrastructure as code", "source_ip": "203.0.113.92", "outcome": "Success", "request_id": "c749985d-892c-45b0-980e-5cccf45e246d" } }, { "model": "app.apicall", "pk": 92, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-13T05:22:20Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.120", "outcome": "ValidationError", "request_id": "5750c3ed-a035-46a2-b824-0b7adca89113" } }, { "model": "app.apicall", "pk": 93, "fields": { "principal": 34, "account_id": 6, "provider": "aws", "event_time": "2026-04-05T16:02:55Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "command line", "source_ip": "203.0.113.179", "outcome": "Success", "request_id": "38cc984d-10d4-4da1-aeb8-94338d415b20" } }, { "model": "app.apicall", "pk": 94, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-20T19:03:53Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.29", "outcome": "Success", "request_id": "e7cf75c8-6248-487b-b61f-9b0e81fc6510" } }, { "model": "app.apicall", "pk": 95, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-15T06:32:07Z", "operation": "storage.SetBucketPolicy", "region": "ap-1", "client": "command line", "source_ip": "198.51.100.148", "outcome": "Success", "request_id": "5675b2bb-eebe-495a-99e7-15b3a02d45d2" } }, { "model": "app.apicall", "pk": 96, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-22T06:16:12Z", "operation": "identity.ListRoles", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.44", "outcome": "Success", "request_id": "5a369994-3c9d-4501-ad81-173fc9126f59" } }, { "model": "app.apicall", "pk": 97, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-16T14:16:34Z", "operation": "identity.ListRoles", "region": "us-1", "client": "web console", "source_ip": "198.51.100.136", "outcome": "Success", "request_id": "c7afb002-7111-428f-8710-60ce9b32c1bf" } }, { "model": "app.apicall", "pk": 98, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-01-28T23:12:09Z", "operation": "storage.GetObject", "region": "eu-2", "client": "infrastructure as code", "source_ip": "203.0.113.158", "outcome": "Success", "request_id": "f5b5622e-dcbe-43ac-9426-b2a8820af811" } }, { "model": "app.apicall", "pk": 99, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-16T03:14:24Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "198.51.100.128", "outcome": "Success", "request_id": "0de9717e-377d-4452-bb55-0bcb2a813394" } }, { "model": "app.apicall", "pk": 100, "fields": { "principal": 21, "account_id": 8, "provider": "aws", "event_time": "2026-04-28T22:56:00Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.135", "outcome": "Success", "request_id": "e52627fb-73de-45c5-8328-d7d590ac7013" } }, { "model": "app.apicall", "pk": 101, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-13T10:06:54Z", "operation": "storage.PutObject", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.163", "outcome": "Success", "request_id": "171118cf-96b5-449a-a611-d74e9e3bb0db" } }, { "model": "app.apicall", "pk": 102, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-15T08:57:59Z", "operation": "keys.Decrypt", "region": "us-1", "client": "command line", "source_ip": "192.0.2.4", "outcome": "AccessDenied", "request_id": "b320ae02-5145-401f-81b7-76e206b36235" } }, { "model": "app.apicall", "pk": 103, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-18T23:37:41Z", "operation": "storage.PutObject", "region": "global", "client": "web console", "source_ip": "198.51.100.80", "outcome": "Success", "request_id": "a711b6c6-3e94-4863-a344-137b644f7127" } }, { "model": "app.apicall", "pk": 104, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-02-27T09:18:41Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "web console", "source_ip": "203.0.113.142", "outcome": "Success", "request_id": "e3105072-c0e3-4359-8b67-fb5643d79740" } }, { "model": "app.apicall", "pk": 105, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-01-31T09:34:39Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.166", "outcome": "Success", "request_id": "52b1a5a1-a77b-4437-9c67-b0e1a86e4d82" } }, { "model": "app.apicall", "pk": 106, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-10T20:17:21Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.4", "outcome": "Success", "request_id": "3221bd5c-4bcb-4d04-94dc-8045e250e7a0" } }, { "model": "app.apicall", "pk": 107, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-08T07:36:38Z", "operation": "keys.Decrypt", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.103", "outcome": "Success", "request_id": "3b356f09-2f5d-4308-91b6-8495267effb9" } }, { "model": "app.apicall", "pk": 108, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-14T16:14:46Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.74", "outcome": "Success", "request_id": "53235514-d1bc-4989-824c-acd5a5f510ce" } }, { "model": "app.apicall", "pk": 109, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-02-27T14:15:20Z", "operation": "storage.PutObject", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.212", "outcome": "Success", "request_id": "5bd75001-f5de-4038-91f5-aa4e46b74422" } }, { "model": "app.apicall", "pk": 110, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-08T18:57:44Z", "operation": "compute.StartInstance", "region": "global", "client": "command line", "source_ip": "198.51.100.228", "outcome": "AccessDenied", "request_id": "4454dd37-1f40-45f0-bde0-f3fed3fa88d1" } }, { "model": "app.apicall", "pk": 111, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-23T03:50:39Z", "operation": "storage.PutObject", "region": "ap-1", "client": "command line", "source_ip": "192.0.2.140", "outcome": "Success", "request_id": "34eab34b-6ee6-47df-bd01-17e4a5ddb88c" } }, { "model": "app.apicall", "pk": 112, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-11T13:25:57Z", "operation": "billing.GetCostReport", "region": "global", "client": "internal service", "source_ip": "198.51.100.225", "outcome": "Success", "request_id": "cd47e4fc-d49d-4346-b3ef-46e74755a1cf" } }, { "model": "app.apicall", "pk": 113, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-02-27T16:28:58Z", "operation": "network.OpenIngressRule", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.87", "outcome": "ValidationError", "request_id": "eb1d8b4b-5134-4fe7-a5b0-73a73e7f3a00" } }, { "model": "app.apicall", "pk": 114, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-23T15:09:52Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "command line", "source_ip": "198.51.100.221", "outcome": "AccessDenied", "request_id": "23e4cfe1-0a78-4501-a22a-a64180acc8c4" } }, { "model": "app.apicall", "pk": 115, "fields": { "principal": 53, "account_id": 10, "provider": "azure", "event_time": "2026-02-22T15:37:05Z", "operation": "compute.DescribeInstances", "region": "global", "client": "command line", "source_ip": "198.51.100.59", "outcome": "Success", "request_id": "0a68f743-b83e-4723-812c-798628d9630d" } }, { "model": "app.apicall", "pk": 116, "fields": { "principal": 54, "account_id": 3, "provider": "azure", "event_time": "2026-03-07T16:09:35Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "198.51.100.166", "outcome": "Success", "request_id": "47d67be0-b6cd-4633-a8b3-a56e4fdac8db" } }, { "model": "app.apicall", "pk": 117, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-21T20:08:58Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.228", "outcome": "Success", "request_id": "b486f448-84aa-490a-90d0-d5f635e811a8" } }, { "model": "app.apicall", "pk": 118, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-04T05:05:30Z", "operation": "compute.DescribeInstances", "region": "global", "client": "SDK", "source_ip": "203.0.113.248", "outcome": "Success", "request_id": "2b46d365-b43a-446e-b6c3-1b4b3e22d70b" } }, { "model": "app.apicall", "pk": 119, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-03-29T09:22:15Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.254", "outcome": "Success", "request_id": "be1e15bf-4514-48bf-b8cf-58479d6fcbb5" } }, { "model": "app.apicall", "pk": 120, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-10T00:23:28Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "web console", "source_ip": "203.0.113.52", "outcome": "Success", "request_id": "9e4d88f8-b2ef-4590-a111-91a37f880116" } }, { "model": "app.apicall", "pk": 121, "fields": { "principal": 32, "account_id": 7, "provider": "aws", "event_time": "2026-03-22T09:15:04Z", "operation": "network.OpenIngressRule", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.96", "outcome": "Success", "request_id": "32280fc2-c6e8-4980-92f9-4eddb981046d" } }, { "model": "app.apicall", "pk": 122, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-15T21:53:44Z", "operation": "keys.ScheduleKeyDeletion", "region": "eu-1", "client": "internal service", "source_ip": "203.0.113.82", "outcome": "Success", "request_id": "7334ef79-8aea-4660-815d-c36b576162f5" } }, { "model": "app.apicall", "pk": 123, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-16T18:55:55Z", "operation": "identity.ListRoles", "region": "us-2", "client": "SDK", "source_ip": "203.0.113.33", "outcome": "Success", "request_id": "3d306208-654f-4614-a3bd-8ed38d609d2d" } }, { "model": "app.apicall", "pk": 124, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-07T00:31:14Z", "operation": "storage.PutObject", "region": "global", "client": "web console", "source_ip": "192.0.2.1", "outcome": "AccessDenied", "request_id": "a9780899-acef-436d-bc02-10fd15789bcd" } }, { "model": "app.apicall", "pk": 125, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-16T12:09:28Z", "operation": "storage.PutObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.3", "outcome": "Throttled", "request_id": "abb0678d-35fa-464f-aaa2-0eae43056cca" } }, { "model": "app.apicall", "pk": 126, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-01-25T21:23:09Z", "operation": "network.OpenIngressRule", "region": "eu-2", "client": "web console", "source_ip": "203.0.113.104", "outcome": "Success", "request_id": "578e1f61-c482-48b4-93e4-9623a803026a" } }, { "model": "app.apicall", "pk": 127, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-01T15:28:41Z", "operation": "audit.StopLogging", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.206", "outcome": "Success", "request_id": "9b740a7f-1cb9-4153-aeef-3a2f835396dd" } }, { "model": "app.apicall", "pk": 128, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-01T07:19:26Z", "operation": "billing.GetCostReport", "region": "global", "client": "SDK", "source_ip": "203.0.113.91", "outcome": "Success", "request_id": "9b819c70-bc3b-4db5-be28-04d1f5e0b257" } }, { "model": "app.apicall", "pk": 129, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-24T10:35:22Z", "operation": "compute.StartInstance", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.171", "outcome": "Success", "request_id": "2b6865ed-db72-4b27-89eb-1ebad0846bac" } }, { "model": "app.apicall", "pk": 130, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-17T16:01:41Z", "operation": "storage.PutObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.15", "outcome": "Success", "request_id": "15a85fb8-24b4-4f00-838e-d41c7fc0c05f" } }, { "model": "app.apicall", "pk": 131, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-24T14:33:09Z", "operation": "storage.GetObject", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.90", "outcome": "Success", "request_id": "20d4254a-2791-49e0-8999-779f0430f16f" } }, { "model": "app.apicall", "pk": 132, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-13T17:25:41Z", "operation": "storage.GetObject", "region": "eu-2", "client": "infrastructure as code", "source_ip": "192.0.2.37", "outcome": "Success", "request_id": "a280594f-3403-4987-aece-42c4d21f6809" } }, { "model": "app.apicall", "pk": 133, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-03T09:03:49Z", "operation": "identity.ListRoles", "region": "ap-1", "client": "command line", "source_ip": "198.51.100.252", "outcome": "Success", "request_id": "5742c303-cfa0-4632-852d-a5d9007d296e" } }, { "model": "app.apicall", "pk": 134, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-09T01:04:07Z", "operation": "keys.Decrypt", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.66", "outcome": "Success", "request_id": "361f5c76-1c16-4c08-bf8f-c15a6382f9ec" } }, { "model": "app.apicall", "pk": 135, "fields": { "principal": 16, "account_id": 10, "provider": "azure", "event_time": "2026-04-18T07:35:59Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.249", "outcome": "Success", "request_id": "18cc45b1-99fe-4978-91a8-4919273d4960" } }, { "model": "app.apicall", "pk": 136, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-03-30T22:25:01Z", "operation": "keys.Decrypt", "region": "us-2", "client": "command line", "source_ip": "192.0.2.33", "outcome": "Success", "request_id": "4d082481-19d9-4924-bf90-3285fdb0faad" } }, { "model": "app.apicall", "pk": 137, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-16T19:25:02Z", "operation": "storage.GetObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.239", "outcome": "Success", "request_id": "1c96b096-3aa6-433b-9de2-8a69d7cd4cfa" } }, { "model": "app.apicall", "pk": 138, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-04-23T08:17:47Z", "operation": "identity.CreateUser", "region": "eu-2", "client": "internal service", "source_ip": "203.0.113.203", "outcome": "Success", "request_id": "ddb5842d-e669-401e-ac27-22136ec8c0b1" } }, { "model": "app.apicall", "pk": 139, "fields": { "principal": 19, "account_id": 5, "provider": "azure", "event_time": "2026-02-17T07:36:44Z", "operation": "audit.DeleteTrail", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.102", "outcome": "AccessDenied", "request_id": "6119db07-122f-4002-b806-ff1e3eff8c8f" } }, { "model": "app.apicall", "pk": 140, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-23T07:42:18Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.136", "outcome": "Success", "request_id": "edb7a3ec-cf9e-49d1-b59a-dc49ae5816cd" } }, { "model": "app.apicall", "pk": 141, "fields": { "principal": 60, "account_id": 2, "provider": "azure", "event_time": "2026-02-23T16:15:53Z", "operation": "storage.PutObject", "region": "global", "client": "infrastructure as code", "source_ip": "203.0.113.206", "outcome": "Success", "request_id": "5a0543d9-cd31-43e0-9dbe-651468fb7a70" } }, { "model": "app.apicall", "pk": 142, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-17T00:11:50Z", "operation": "storage.ListBuckets", "region": "us-2", "client": "web console", "source_ip": "192.0.2.225", "outcome": "NotFound", "request_id": "85964a34-3344-4392-8995-207fa7102184" } }, { "model": "app.apicall", "pk": 143, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-09T17:14:55Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "command line", "source_ip": "198.51.100.118", "outcome": "AccessDenied", "request_id": "c71c9adc-76e2-4f76-bfcd-4ce236594e11" } }, { "model": "app.apicall", "pk": 144, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-05-26T19:54:16Z", "operation": "storage.PutObject", "region": "eu-2", "client": "SDK", "source_ip": "192.0.2.233", "outcome": "Success", "request_id": "444db1d1-9f19-4b45-91b7-c5c39319f115" } }, { "model": "app.apicall", "pk": 145, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-02T22:37:29Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.124", "outcome": "Success", "request_id": "e5a07b70-27a3-4c61-a1e8-d6e06f41ab51" } }, { "model": "app.apicall", "pk": 146, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-01T23:24:57Z", "operation": "compute.DescribeInstances", "region": "eu-2", "client": "infrastructure as code", "source_ip": "203.0.113.36", "outcome": "Success", "request_id": "9ef8f657-fb10-45ba-804f-8e1025838f0d" } }, { "model": "app.apicall", "pk": 147, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-05-28T20:51:50Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.46", "outcome": "Success", "request_id": "a19439c7-fdf6-4565-8b34-3caa27a331c2" } }, { "model": "app.apicall", "pk": 148, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-16T19:08:41Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.44", "outcome": "Success", "request_id": "58f0b05d-73a3-48d9-af0e-697b06b55c41" } }, { "model": "app.apicall", "pk": 149, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-27T12:36:54Z", "operation": "identity.ListRoles", "region": "ap-1", "client": "web console", "source_ip": "198.51.100.158", "outcome": "Success", "request_id": "bf031805-8e6b-4093-a257-8ca09ab50d9b" } }, { "model": "app.apicall", "pk": 150, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-17T13:47:39Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.89", "outcome": "Success", "request_id": "4e9112d7-6b27-4f0a-93b4-ee980d284cef" } }, { "model": "app.apicall", "pk": 151, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-16T13:52:32Z", "operation": "identity.CreateUser", "region": "ap-1", "client": "internal service", "source_ip": "192.0.2.195", "outcome": "Success", "request_id": "68959bef-2665-4e63-a848-015840ece28d" } }, { "model": "app.apicall", "pk": 152, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-03-26T21:02:04Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "web console", "source_ip": "203.0.113.172", "outcome": "Success", "request_id": "97fb9591-928f-4081-b2b4-9712955862ea" } }, { "model": "app.apicall", "pk": 153, "fields": { "principal": 60, "account_id": 2, "provider": "azure", "event_time": "2026-02-26T02:46:41Z", "operation": "storage.GetObject", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.126", "outcome": "Success", "request_id": "c9096e1d-a8f5-4dd6-8ddb-39d78ad7bf19" } }, { "model": "app.apicall", "pk": 154, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-16T12:11:04Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "command line", "source_ip": "192.0.2.137", "outcome": "Success", "request_id": "92366211-f9c2-43be-bcce-d36386ffaa22" } }, { "model": "app.apicall", "pk": 155, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-03T03:32:06Z", "operation": "storage.GetObject", "region": "global", "client": "SDK", "source_ip": "203.0.113.108", "outcome": "Success", "request_id": "181fee1f-52a1-4898-90b1-415bba0583a2" } }, { "model": "app.apicall", "pk": 156, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-17T02:21:11Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.191", "outcome": "Throttled", "request_id": "f051214b-8bdc-450a-9b15-4b29304f4d49" } }, { "model": "app.apicall", "pk": 157, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-04T18:37:14Z", "operation": "storage.GetObject", "region": "us-2", "client": "command line", "source_ip": "192.0.2.197", "outcome": "Success", "request_id": "8acda732-bc83-468d-8117-eb22b70f394b" } }, { "model": "app.apicall", "pk": 158, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-17T14:09:04Z", "operation": "compute.StartInstance", "region": "us-1", "client": "command line", "source_ip": "198.51.100.78", "outcome": "Success", "request_id": "29a6366f-7c34-4738-9e7f-b3ed4c2931d4" } }, { "model": "app.apicall", "pk": 159, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-18T03:27:56Z", "operation": "audit.DeleteTrail", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.216", "outcome": "Success", "request_id": "2cdebdf8-fb7d-4805-9eb9-a51421997328" } }, { "model": "app.apicall", "pk": 160, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-05-30T22:18:55Z", "operation": "keys.Decrypt", "region": "ap-1", "client": "command line", "source_ip": "198.51.100.12", "outcome": "Throttled", "request_id": "0504c42a-75d0-4d7b-928f-e69b612d3308" } }, { "model": "app.apicall", "pk": 161, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-07T17:34:21Z", "operation": "identity.ListRoles", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.200", "outcome": "Success", "request_id": "4e7f132d-1e53-44ee-8fc9-ffd2731d489c" } }, { "model": "app.apicall", "pk": 162, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-04T08:35:58Z", "operation": "keys.ScheduleKeyDeletion", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.237", "outcome": "Success", "request_id": "c80a4cd8-934a-4b5c-813e-f92bb4fdd716" } }, { "model": "app.apicall", "pk": 163, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-16T15:00:07Z", "operation": "storage.SetBucketPolicy", "region": "global", "client": "command line", "source_ip": "203.0.113.208", "outcome": "Success", "request_id": "157bbc2a-df9e-4c2e-af6d-8ba6de9c7b4c" } }, { "model": "app.apicall", "pk": 164, "fields": { "principal": 22, "account_id": 4, "provider": "aws", "event_time": "2026-04-13T13:29:56Z", "operation": "compute.DescribeInstances", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.69", "outcome": "Success", "request_id": "a22cf590-2c8e-4fdd-a2a8-441de979af02" } }, { "model": "app.apicall", "pk": 165, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-17T21:20:58Z", "operation": "billing.GetCostReport", "region": "eu-2", "client": "SDK", "source_ip": "192.0.2.126", "outcome": "Success", "request_id": "6eb4f9b0-04a9-427c-aa22-8dc14ba3030e" } }, { "model": "app.apicall", "pk": 166, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-20T07:26:00Z", "operation": "billing.GetCostReport", "region": "ap-1", "client": "SDK", "source_ip": "198.51.100.112", "outcome": "Success", "request_id": "96d834f3-9a3d-4fd6-8c52-8d74ae679ba5" } }, { "model": "app.apicall", "pk": 167, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-19T03:10:47Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.188", "outcome": "Success", "request_id": "f1749dc7-4bcb-4432-9529-2242ad0bb560" } }, { "model": "app.apicall", "pk": 168, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-03-30T09:36:50Z", "operation": "compute.DescribeInstances", "region": "ap-1", "client": "web console", "source_ip": "203.0.113.225", "outcome": "Success", "request_id": "1d053fd8-d1de-4584-8016-198c65471aaf" } }, { "model": "app.apicall", "pk": 169, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-10T16:02:11Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "SDK", "source_ip": "192.0.2.6", "outcome": "Success", "request_id": "98f01b09-b4d5-4e09-9d84-025015e71c05" } }, { "model": "app.apicall", "pk": 170, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-05-29T17:58:22Z", "operation": "identity.CreateUser", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.29", "outcome": "Success", "request_id": "365714af-33ee-45b5-a1b2-1d09a7d635b9" } }, { "model": "app.apicall", "pk": 171, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-18T13:30:51Z", "operation": "storage.PutObject", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.244", "outcome": "Success", "request_id": "0426aa04-f32b-4935-9628-c06507874969" } }, { "model": "app.apicall", "pk": 172, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-18T06:33:19Z", "operation": "storage.PutObject", "region": "eu-2", "client": "web console", "source_ip": "203.0.113.13", "outcome": "Success", "request_id": "f06805b1-6521-4f49-bb33-8b8228fbf20b" } }, { "model": "app.apicall", "pk": 173, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-19T10:51:45Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.202", "outcome": "Success", "request_id": "f06e53b7-954c-4050-a270-dba7c28b9cd7" } }, { "model": "app.apicall", "pk": 174, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-03-30T13:32:53Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.249", "outcome": "Success", "request_id": "d4fbbc5a-9085-45c2-a4c3-854efaeae478" } }, { "model": "app.apicall", "pk": 175, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-21T06:02:47Z", "operation": "compute.DescribeInstances", "region": "global", "client": "SDK", "source_ip": "198.51.100.11", "outcome": "Success", "request_id": "fe291682-7876-4f3a-ae26-63c8a9a920a5" } }, { "model": "app.apicall", "pk": 176, "fields": { "principal": 2, "account_id": 9, "provider": "aws", "event_time": "2026-03-05T04:53:32Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "203.0.113.218", "outcome": "Success", "request_id": "fe5fa641-b078-4401-a756-847fc07224f3" } }, { "model": "app.apicall", "pk": 177, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-01-27T18:03:04Z", "operation": "compute.StartInstance", "region": "us-1", "client": "command line", "source_ip": "192.0.2.146", "outcome": "Success", "request_id": "43ca5bdf-0ab0-43d3-9721-6fac2d54ddf8" } }, { "model": "app.apicall", "pk": 178, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-25T16:00:39Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.190", "outcome": "Success", "request_id": "43adb195-677e-4e9b-9e73-0f3bf6f576c5" } }, { "model": "app.apicall", "pk": 179, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-26T12:18:13Z", "operation": "compute.StartInstance", "region": "eu-1", "client": "internal service", "source_ip": "203.0.113.253", "outcome": "Success", "request_id": "f986dc73-5866-40a6-8fa0-3136695b616b" } }, { "model": "app.apicall", "pk": 180, "fields": { "principal": 35, "account_id": 6, "provider": "aws", "event_time": "2026-03-12T02:17:00Z", "operation": "storage.GetObject", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.70", "outcome": "Success", "request_id": "921b2eb0-ec25-4440-bb42-beff34eda468" } }, { "model": "app.apicall", "pk": 181, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-02T00:29:33Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.60", "outcome": "Success", "request_id": "83a0bdff-53ca-423b-83c6-f24fdb32cf3e" } }, { "model": "app.apicall", "pk": 182, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-21T03:00:22Z", "operation": "identity.ListRoles", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.170", "outcome": "Success", "request_id": "12122e53-deb7-4c2b-a961-da39ce6a2509" } }, { "model": "app.apicall", "pk": 183, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-27T14:58:24Z", "operation": "compute.DescribeInstances", "region": "global", "client": "SDK", "source_ip": "198.51.100.50", "outcome": "Success", "request_id": "07def8f3-e212-4bf5-b72f-b0573f56b69e" } }, { "model": "app.apicall", "pk": 184, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-04T19:51:02Z", "operation": "identity.CreateAccessKey", "region": "global", "client": "command line", "source_ip": "198.51.100.22", "outcome": "Success", "request_id": "41b5fbca-0a8f-4f0c-a120-053a35029f6e" } }, { "model": "app.apicall", "pk": 185, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-23T00:17:46Z", "operation": "keys.Decrypt", "region": "us-1", "client": "web console", "source_ip": "198.51.100.139", "outcome": "Success", "request_id": "18b960c7-ce5f-442d-9e05-8125b8f77819" } }, { "model": "app.apicall", "pk": 186, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-06-01T04:47:28Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.205", "outcome": "Success", "request_id": "820fb15f-d9b6-4c2b-9ef9-f693782654cb" } }, { "model": "app.apicall", "pk": 187, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-05-31T14:10:07Z", "operation": "storage.ListBuckets", "region": "global", "client": "command line", "source_ip": "203.0.113.35", "outcome": "Success", "request_id": "125ab71c-15c3-48cd-8b6c-d7c70b5353ca" } }, { "model": "app.apicall", "pk": 188, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-02T05:08:51Z", "operation": "audit.StopLogging", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.21", "outcome": "AccessDenied", "request_id": "809f2bdf-74a7-47fe-8b37-e621bad06f64" } }, { "model": "app.apicall", "pk": 189, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-04T12:08:49Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.145", "outcome": "Success", "request_id": "300c465d-1f01-41be-90fc-efd2bde796d6" } }, { "model": "app.apicall", "pk": 190, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-23T11:01:47Z", "operation": "storage.PutObject", "region": "ap-1", "client": "web console", "source_ip": "198.51.100.113", "outcome": "Success", "request_id": "cb297846-c288-426b-a3c9-00c6a181e5b5" } }, { "model": "app.apicall", "pk": 191, "fields": { "principal": 49, "account_id": 9, "provider": "aws", "event_time": "2026-05-23T17:47:12Z", "operation": "storage.GetObject", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.106", "outcome": "Success", "request_id": "0c7c8a78-748d-4924-b064-6771060231dd" } }, { "model": "app.apicall", "pk": 192, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-06-03T03:58:04Z", "operation": "storage.PutObject", "region": "us-1", "client": "web console", "source_ip": "192.0.2.41", "outcome": "Success", "request_id": "91cb392d-062a-4e9c-afa8-1f2faa76ff84" } }, { "model": "app.apicall", "pk": 193, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-03-31T03:10:11Z", "operation": "storage.GetObject", "region": "eu-2", "client": "internal service", "source_ip": "198.51.100.56", "outcome": "Success", "request_id": "803d8cfa-f92a-4f97-aa08-87d05bd8e4ab" } }, { "model": "app.apicall", "pk": 194, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-15T22:33:52Z", "operation": "audit.StopLogging", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.23", "outcome": "ValidationError", "request_id": "017ba8f3-557a-47c2-a57d-059e540be9ef" } }, { "model": "app.apicall", "pk": 195, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-11T11:48:29Z", "operation": "storage.PutObject", "region": "us-1", "client": "command line", "source_ip": "203.0.113.226", "outcome": "Success", "request_id": "49066c20-c272-4992-a90e-57ff0af01298" } }, { "model": "app.apicall", "pk": 196, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-26T02:41:23Z", "operation": "compute.StartInstance", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.147", "outcome": "Success", "request_id": "f3a8b24c-a905-4a95-b202-365ec2fc54a5" } }, { "model": "app.apicall", "pk": 197, "fields": { "principal": 35, "account_id": 6, "provider": "aws", "event_time": "2026-03-14T06:42:53Z", "operation": "storage.SetBucketPolicy", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.51", "outcome": "Throttled", "request_id": "77c8beb3-bfa1-4646-804f-934a3bc8fce9" } }, { "model": "app.apicall", "pk": 198, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-03-27T00:09:16Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "web console", "source_ip": "198.51.100.202", "outcome": "Success", "request_id": "d223288d-d846-4026-8818-a837887be3ab" } }, { "model": "app.apicall", "pk": 199, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-06T22:27:37Z", "operation": "compute.StartInstance", "region": "us-2", "client": "internal service", "source_ip": "203.0.113.149", "outcome": "Success", "request_id": "f1faf857-3d8f-477f-bdea-45216308f62c" } }, { "model": "app.apicall", "pk": 200, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-16T23:28:08Z", "operation": "storage.GetObject", "region": "global", "client": "SDK", "source_ip": "203.0.113.185", "outcome": "Success", "request_id": "5c61970b-39e4-458a-ac8b-b21001b0d4b1" } }, { "model": "app.apicall", "pk": 201, "fields": { "principal": 37, "account_id": 8, "provider": "aws", "event_time": "2026-01-23T13:04:45Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.50", "outcome": "Success", "request_id": "c6f7e1ab-f62b-4413-b16d-abb946c44811" } }, { "model": "app.apicall", "pk": 202, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-07T11:25:30Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "infrastructure as code", "source_ip": "198.51.100.239", "outcome": "Success", "request_id": "3b3a7689-e9ff-4180-a019-e14bc9092bdd" } }, { "model": "app.apicall", "pk": 203, "fields": { "principal": 33, "account_id": 5, "provider": "azure", "event_time": "2026-02-20T17:05:31Z", "operation": "identity.CreateAccessKey", "region": "eu-1", "client": "internal service", "source_ip": "203.0.113.210", "outcome": "Success", "request_id": "93927ef9-753c-489e-9219-cd00725fb59d" } }, { "model": "app.apicall", "pk": 204, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-08T04:14:21Z", "operation": "storage.PutObject", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.225", "outcome": "Success", "request_id": "a82c6666-9ef3-4c6b-a741-0403e1dae030" } }, { "model": "app.apicall", "pk": 205, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-19T22:26:18Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.182", "outcome": "NotFound", "request_id": "dcae8198-d6f4-44bb-91f4-871b454f3b7b" } }, { "model": "app.apicall", "pk": 206, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-05T22:51:55Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.44", "outcome": "Success", "request_id": "5224169c-06cf-41b6-8223-01299b249622" } }, { "model": "app.apicall", "pk": 207, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-04-25T23:19:15Z", "operation": "storage.PutObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.45", "outcome": "Success", "request_id": "ce777fd2-903e-41b2-accd-a2d544514931" } }, { "model": "app.apicall", "pk": 208, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-11T00:40:36Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.154", "outcome": "AccessDenied", "request_id": "93e476cc-5143-4c75-bb26-733229136582" } }, { "model": "app.apicall", "pk": 209, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-03T13:10:31Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "command line", "source_ip": "198.51.100.203", "outcome": "Success", "request_id": "6c5d987c-2d98-4093-abc3-3906c3e63931" } }, { "model": "app.apicall", "pk": 210, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-22T13:41:56Z", "operation": "keys.Decrypt", "region": "global", "client": "internal service", "source_ip": "203.0.113.204", "outcome": "Success", "request_id": "5dc9cdbe-007e-43fc-9a22-42c98c885e90" } }, { "model": "app.apicall", "pk": 211, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-27T00:49:24Z", "operation": "storage.GetObject", "region": "us-2", "client": "infrastructure as code", "source_ip": "203.0.113.81", "outcome": "Success", "request_id": "74e29511-f7ca-405a-96fe-1162403a2361" } }, { "model": "app.apicall", "pk": 212, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-04T22:43:53Z", "operation": "identity.CreateAccessKey", "region": "global", "client": "SDK", "source_ip": "203.0.113.58", "outcome": "Success", "request_id": "7c43a563-9b0e-4f12-9cf5-c36895faa651" } }, { "model": "app.apicall", "pk": 213, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-03-29T22:57:40Z", "operation": "storage.SetBucketPolicy", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.94", "outcome": "Success", "request_id": "76e0db87-42cc-4077-8763-c4f7921d28fb" } }, { "model": "app.apicall", "pk": 214, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-24T15:13:55Z", "operation": "storage.GetObject", "region": "us-2", "client": "web console", "source_ip": "203.0.113.79", "outcome": "Success", "request_id": "365cff3b-6a00-47f2-83b3-2f3cea8d7b6f" } }, { "model": "app.apicall", "pk": 215, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-01T21:42:09Z", "operation": "identity.ListRoles", "region": "us-1", "client": "command line", "source_ip": "203.0.113.230", "outcome": "AccessDenied", "request_id": "41bdd40a-40de-4520-b840-63cbbc052262" } }, { "model": "app.apicall", "pk": 216, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-07T20:59:56Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.222", "outcome": "ValidationError", "request_id": "2d3f5646-1545-40a1-8ac7-2173b9692bfe" } }, { "model": "app.apicall", "pk": 217, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-19T19:35:32Z", "operation": "storage.PutObject", "region": "global", "client": "command line", "source_ip": "192.0.2.35", "outcome": "Success", "request_id": "0ab22aa5-4c02-49fa-a832-4efed8d82ab5" } }, { "model": "app.apicall", "pk": 218, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-20T09:29:48Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "web console", "source_ip": "198.51.100.234", "outcome": "Success", "request_id": "267f26df-3ebb-49de-b223-51d0f4b87f8e" } }, { "model": "app.apicall", "pk": 219, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-06-05T19:32:58Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.247", "outcome": "Success", "request_id": "e166c27c-198e-41c3-95dd-52d64efc2561" } }, { "model": "app.apicall", "pk": 220, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-01-29T06:39:12Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "command line", "source_ip": "198.51.100.213", "outcome": "Success", "request_id": "7736fc78-0d72-4356-aec3-578a7563f3f0" } }, { "model": "app.apicall", "pk": 221, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-18T00:50:00Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.219", "outcome": "Success", "request_id": "d47c6a3c-e034-4b42-b8ee-aacb8a75732b" } }, { "model": "app.apicall", "pk": 222, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-22T05:22:06Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.147", "outcome": "Success", "request_id": "0254ba5b-cd14-462b-a21f-26c6f5da9359" } }, { "model": "app.apicall", "pk": 223, "fields": { "principal": 32, "account_id": 7, "provider": "aws", "event_time": "2026-03-23T21:05:22Z", "operation": "identity.ListRoles", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.138", "outcome": "Success", "request_id": "b88a05bc-e079-41a5-941c-b35eb5d904a4" } }, { "model": "app.apicall", "pk": 224, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-03-31T06:10:13Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "internal service", "source_ip": "192.0.2.164", "outcome": "Success", "request_id": "a20d002a-af27-4abb-92df-34d4c5d95ecd" } }, { "model": "app.apicall", "pk": 225, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-20T13:27:48Z", "operation": "storage.GetObject", "region": "eu-1", "client": "command line", "source_ip": "203.0.113.217", "outcome": "Success", "request_id": "a987c4f3-7f85-426d-b9f7-7d7063d247ee" } }, { "model": "app.apicall", "pk": 226, "fields": { "principal": 2, "account_id": 9, "provider": "aws", "event_time": "2026-03-06T17:03:00Z", "operation": "compute.StartInstance", "region": "us-1", "client": "web console", "source_ip": "192.0.2.215", "outcome": "Throttled", "request_id": "118f3e29-13df-422b-8eb6-4db78a3e060c" } }, { "model": "app.apicall", "pk": 227, "fields": { "principal": 53, "account_id": 10, "provider": "azure", "event_time": "2026-02-23T09:23:00Z", "operation": "identity.ListRoles", "region": "global", "client": "internal service", "source_ip": "198.51.100.27", "outcome": "AccessDenied", "request_id": "04637fd5-caff-4bb0-a334-6ee62c2b4330" } }, { "model": "app.apicall", "pk": 228, "fields": { "principal": 2, "account_id": 9, "provider": "aws", "event_time": "2026-03-08T03:58:41Z", "operation": "storage.GetObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.113", "outcome": "Success", "request_id": "eb485fb0-5458-4f3b-b7c9-964e99be3ba7" } }, { "model": "app.apicall", "pk": 229, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-08T15:19:33Z", "operation": "storage.PutObject", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.104", "outcome": "Success", "request_id": "eb12e1de-f3d3-4c87-bfee-b604052af17a" } }, { "model": "app.apicall", "pk": 230, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-09T16:45:43Z", "operation": "storage.GetObject", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.42", "outcome": "Success", "request_id": "33bce793-abdf-490c-970a-cf26a55d3bfe" } }, { "model": "app.apicall", "pk": 231, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-29T14:32:42Z", "operation": "storage.GetObject", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.62", "outcome": "Success", "request_id": "ddfeaa02-233e-4e9e-a413-968a874c71fa" } }, { "model": "app.apicall", "pk": 232, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-18T13:34:47Z", "operation": "storage.PutObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.109", "outcome": "Success", "request_id": "81bc2392-6547-4eac-81b5-2b64d0964071" } }, { "model": "app.apicall", "pk": 233, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-20T12:17:47Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "web console", "source_ip": "198.51.100.16", "outcome": "Success", "request_id": "8ed098d9-bf52-4ada-a091-30e6b8a9e782" } }, { "model": "app.apicall", "pk": 234, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-06T06:00:30Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.85", "outcome": "Success", "request_id": "1609c1bf-e8e2-4895-b6d6-1e74f1a7995d" } }, { "model": "app.apicall", "pk": 235, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-08T09:41:31Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "192.0.2.114", "outcome": "Success", "request_id": "728c7970-7103-424b-ba42-1268a90cd278" } }, { "model": "app.apicall", "pk": 236, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-11T12:35:40Z", "operation": "compute.StartInstance", "region": "eu-1", "client": "command line", "source_ip": "203.0.113.114", "outcome": "Success", "request_id": "46ba2f5f-62d6-4202-a0dc-467c9c9a0d60" } }, { "model": "app.apicall", "pk": 237, "fields": { "principal": 37, "account_id": 8, "provider": "aws", "event_time": "2026-01-23T18:02:56Z", "operation": "storage.GetObject", "region": "ap-1", "client": "web console", "source_ip": "203.0.113.114", "outcome": "Success", "request_id": "1b45257e-4859-4b47-a60c-362b98df0d2e" } }, { "model": "app.apicall", "pk": 238, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-06T07:38:55Z", "operation": "storage.GetObject", "region": "us-2", "client": "SDK", "source_ip": "192.0.2.248", "outcome": "Success", "request_id": "dcebe11c-dfb5-43a9-9608-ec7a8c626e0e" } }, { "model": "app.apicall", "pk": 239, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-17T03:30:03Z", "operation": "keys.ScheduleKeyDeletion", "region": "global", "client": "internal service", "source_ip": "192.0.2.251", "outcome": "Success", "request_id": "05a38293-0a9f-407f-87dc-fb6683137666" } }, { "model": "app.apicall", "pk": 240, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-09T21:19:32Z", "operation": "identity.AttachAdminPolicy", "region": "global", "client": "command line", "source_ip": "203.0.113.216", "outcome": "AccessDenied", "request_id": "facff82d-5c76-4b08-86de-938e0c6781c1" } }, { "model": "app.apicall", "pk": 241, "fields": { "principal": 45, "account_id": 1, "provider": "aws", "event_time": "2026-02-09T20:17:29Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.216", "outcome": "Success", "request_id": "1088e6b7-6adf-40c1-b985-24d1df52864f" } }, { "model": "app.apicall", "pk": 242, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-24T17:23:30Z", "operation": "identity.ListRoles", "region": "global", "client": "internal service", "source_ip": "198.51.100.9", "outcome": "Success", "request_id": "5db5af73-e18f-4cc3-9c70-20336ea90475" } }, { "model": "app.apicall", "pk": 243, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-04-01T18:49:52Z", "operation": "storage.GetObject", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.63", "outcome": "Success", "request_id": "34dc648d-146a-42db-8d4b-8e010a0405c2" } }, { "model": "app.apicall", "pk": 244, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-11T20:21:22Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.253", "outcome": "Throttled", "request_id": "0d13e040-229e-4032-93f7-90085a3c3b90" } }, { "model": "app.apicall", "pk": 245, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-20T10:55:56Z", "operation": "compute.DescribeInstances", "region": "global", "client": "infrastructure as code", "source_ip": "203.0.113.183", "outcome": "Success", "request_id": "dd7a3d52-b9d9-4c75-89bf-bd8d41567187" } }, { "model": "app.apicall", "pk": 246, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-12T06:58:26Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "web console", "source_ip": "203.0.113.99", "outcome": "Success", "request_id": "10705942-33af-4762-8df7-20bec4e16310" } }, { "model": "app.apicall", "pk": 247, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-07T07:41:14Z", "operation": "identity.ListRoles", "region": "us-1", "client": "internal service", "source_ip": "198.51.100.236", "outcome": "Success", "request_id": "3c821398-fd35-4940-b0fa-dec2e46389f9" } }, { "model": "app.apicall", "pk": 248, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-22T23:22:25Z", "operation": "identity.CreateAccessKey", "region": "us-1", "client": "internal service", "source_ip": "198.51.100.118", "outcome": "Success", "request_id": "4aed645e-af40-4632-8da5-631708d8a444" } }, { "model": "app.apicall", "pk": 249, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-18T09:11:47Z", "operation": "network.OpenIngressRule", "region": "us-2", "client": "SDK", "source_ip": "192.0.2.204", "outcome": "Success", "request_id": "858b69bb-15b4-494e-86d3-d2b84d450b79" } }, { "model": "app.apicall", "pk": 250, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-08T01:04:44Z", "operation": "keys.Decrypt", "region": "us-2", "client": "internal service", "source_ip": "203.0.113.98", "outcome": "Success", "request_id": "d0eb9be5-2aeb-4e5c-8bed-c93c43d4981f" } }, { "model": "app.apicall", "pk": 251, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-18T14:11:55Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "192.0.2.173", "outcome": "AccessDenied", "request_id": "d09648fb-7320-4183-a0eb-4f0119321271" } }, { "model": "app.apicall", "pk": 252, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-08T11:15:19Z", "operation": "storage.GetObject", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.145", "outcome": "AccessDenied", "request_id": "ca461740-cf03-4763-8ba1-bea939f4b2d2" } }, { "model": "app.apicall", "pk": 253, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-24T12:50:03Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.169", "outcome": "Success", "request_id": "6dd578aa-89f2-4113-9291-2eae3e2f479b" } }, { "model": "app.apicall", "pk": 254, "fields": { "principal": 58, "account_id": 1, "provider": "aws", "event_time": "2026-02-18T06:41:13Z", "operation": "storage.PutObject", "region": "us-1", "client": "command line", "source_ip": "203.0.113.90", "outcome": "Success", "request_id": "6efd3bdf-d575-4c50-8226-f6cb621c71f4" } }, { "model": "app.apicall", "pk": 255, "fields": { "principal": 17, "account_id": 11, "provider": "aws", "event_time": "2026-05-07T23:30:58Z", "operation": "compute.DescribeInstances", "region": "global", "client": "SDK", "source_ip": "198.51.100.3", "outcome": "ValidationError", "request_id": "ec3e0dff-c551-4a5c-8c2f-43673897b27b" } }, { "model": "app.apicall", "pk": 256, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-20T08:23:37Z", "operation": "identity.ListRoles", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.205", "outcome": "Success", "request_id": "6d88d80e-bce3-49ed-a3fb-4ade0534615f" } }, { "model": "app.apicall", "pk": 257, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-18T12:07:21Z", "operation": "identity.ListRoles", "region": "global", "client": "internal service", "source_ip": "192.0.2.125", "outcome": "Success", "request_id": "dddddd2f-6898-4efc-b7f1-80b1a9412793" } }, { "model": "app.apicall", "pk": 258, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-27T13:02:31Z", "operation": "keys.ScheduleKeyDeletion", "region": "us-2", "client": "infrastructure as code", "source_ip": "198.51.100.113", "outcome": "Success", "request_id": "cf5cb45f-5a7a-49dd-85c2-51356d509394" } }, { "model": "app.apicall", "pk": 259, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-12T01:13:40Z", "operation": "storage.GetObject", "region": "global", "client": "command line", "source_ip": "198.51.100.211", "outcome": "Success", "request_id": "91fdc22f-ebd1-4585-811c-497866f42460" } }, { "model": "app.apicall", "pk": 260, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-01-31T03:16:25Z", "operation": "compute.DescribeInstances", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.142", "outcome": "Success", "request_id": "628baad4-f82e-4c64-b1ae-4cd89a963614" } }, { "model": "app.apicall", "pk": 261, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-04T13:41:10Z", "operation": "storage.GetObject", "region": "eu-1", "client": "internal service", "source_ip": "203.0.113.227", "outcome": "Success", "request_id": "72259623-b1b7-46d5-bcfa-fd61be833958" } }, { "model": "app.apicall", "pk": 262, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-03-27T10:42:04Z", "operation": "identity.ListRoles", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.102", "outcome": "Success", "request_id": "1496941b-d706-4cf7-a801-61d5d459152d" } }, { "model": "app.apicall", "pk": 263, "fields": { "principal": 17, "account_id": 11, "provider": "aws", "event_time": "2026-05-10T02:58:57Z", "operation": "storage.GetObject", "region": "global", "client": "infrastructure as code", "source_ip": "203.0.113.209", "outcome": "Success", "request_id": "3e3d40fe-6895-4c2c-ab9c-14c4282809c3" } }, { "model": "app.apicall", "pk": 264, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-04-02T16:34:21Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.85", "outcome": "Success", "request_id": "5211bf59-7e4a-4716-b7fb-83f5b37206df" } }, { "model": "app.apicall", "pk": 265, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-12T13:06:52Z", "operation": "identity.CreateAccessKey", "region": "global", "client": "internal service", "source_ip": "203.0.113.139", "outcome": "Success", "request_id": "1bf9b64a-d6ed-414b-b713-8f74bd61b066" } }, { "model": "app.apicall", "pk": 266, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-24T11:08:43Z", "operation": "storage.PutObject", "region": "us-2", "client": "web console", "source_ip": "192.0.2.138", "outcome": "Success", "request_id": "acbd156c-1894-43a5-ae26-8a2ae4ce161a" } }, { "model": "app.apicall", "pk": 267, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-05T22:47:33Z", "operation": "identity.CreateAccessKey", "region": "eu-2", "client": "SDK", "source_ip": "192.0.2.5", "outcome": "Success", "request_id": "b5b74547-ab76-4a77-a235-05b3115f0306" } }, { "model": "app.apicall", "pk": 268, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-02-26T19:26:12Z", "operation": "identity.ListRoles", "region": "us-2", "client": "infrastructure as code", "source_ip": "198.51.100.24", "outcome": "Success", "request_id": "d736de53-80d9-4035-9d62-e480d6ac532a" } }, { "model": "app.apicall", "pk": 269, "fields": { "principal": 17, "account_id": 11, "provider": "aws", "event_time": "2026-05-11T00:29:45Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.109", "outcome": "Success", "request_id": "002760fb-afc2-41ce-bc53-1c90de1dccf3" } }, { "model": "app.apicall", "pk": 270, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-04T20:16:45Z", "operation": "storage.PutObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.32", "outcome": "Success", "request_id": "cb9b7d46-2436-49da-ade3-0ead03a003bf" } }, { "model": "app.apicall", "pk": 271, "fields": { "principal": 19, "account_id": 5, "provider": "azure", "event_time": "2026-02-18T20:37:01Z", "operation": "identity.CreateAccessKey", "region": "eu-1", "client": "command line", "source_ip": "203.0.113.4", "outcome": "Success", "request_id": "385b301c-0e8d-4916-b1cb-a5e9bf704582" } }, { "model": "app.apicall", "pk": 272, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-09T20:16:39Z", "operation": "identity.CreateUser", "region": "us-2", "client": "SDK", "source_ip": "198.51.100.139", "outcome": "Success", "request_id": "0702f1a6-8f29-4826-bcab-8c1fec96e7d6" } }, { "model": "app.apicall", "pk": 273, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-19T03:27:10Z", "operation": "storage.GetObject", "region": "ap-1", "client": "internal service", "source_ip": "192.0.2.227", "outcome": "Throttled", "request_id": "969ab734-b365-4ade-86ca-7ad08484f3a1" } }, { "model": "app.apicall", "pk": 274, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-06T05:01:11Z", "operation": "storage.GetObject", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.120", "outcome": "ValidationError", "request_id": "5db13879-ef36-4f01-bb71-cfab9d745735" } }, { "model": "app.apicall", "pk": 275, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-24T17:52:27Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "web console", "source_ip": "198.51.100.32", "outcome": "Success", "request_id": "523b1d07-6040-450a-b11a-c48d2fc2556c" } }, { "model": "app.apicall", "pk": 276, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-28T09:42:05Z", "operation": "storage.PutObject", "region": "eu-2", "client": "SDK", "source_ip": "192.0.2.64", "outcome": "Success", "request_id": "9422c65a-0fcf-4e27-9271-0a53461c1e6a" } }, { "model": "app.apicall", "pk": 277, "fields": { "principal": 50, "account_id": 9, "provider": "aws", "event_time": "2026-01-06T05:08:54Z", "operation": "identity.CreateAccessKey", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.18", "outcome": "Success", "request_id": "618ef003-92e9-49b9-830d-30ecd388ff9a" } }, { "model": "app.apicall", "pk": 278, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-26T08:46:59Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "command line", "source_ip": "203.0.113.246", "outcome": "Success", "request_id": "c0d22b5f-6998-4904-a56f-d46e03975a13" } }, { "model": "app.apicall", "pk": 279, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-21T10:07:12Z", "operation": "storage.PutObject", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.107", "outcome": "Success", "request_id": "1ac20ef6-fddd-4530-bb19-ce92233380bb" } }, { "model": "app.apicall", "pk": 280, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-02T18:44:02Z", "operation": "storage.ListBuckets", "region": "us-2", "client": "infrastructure as code", "source_ip": "192.0.2.69", "outcome": "Success", "request_id": "edd9f420-e66b-4648-8a57-d395986a4a3f" } }, { "model": "app.apicall", "pk": 281, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-29T14:35:44Z", "operation": "storage.GetObject", "region": "global", "client": "web console", "source_ip": "203.0.113.100", "outcome": "AccessDenied", "request_id": "dc26d5b0-bdc3-4afe-9852-26738ca01868" } }, { "model": "app.apicall", "pk": 282, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-21T01:46:37Z", "operation": "audit.StopLogging", "region": "ap-1", "client": "infrastructure as code", "source_ip": "203.0.113.103", "outcome": "Success", "request_id": "1386a277-e025-4491-97f2-d31f3cbc2397" } }, { "model": "app.apicall", "pk": 283, "fields": { "principal": 21, "account_id": 8, "provider": "aws", "event_time": "2026-04-29T00:34:19Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.56", "outcome": "Success", "request_id": "cb3eec3b-ffc0-4e4a-b82b-07c123e02545" } }, { "model": "app.apicall", "pk": 284, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-04-28T03:16:39Z", "operation": "identity.ListRoles", "region": "us-2", "client": "web console", "source_ip": "198.51.100.22", "outcome": "Success", "request_id": "96a83ebe-e28c-4484-adac-951dbd1628ab" } }, { "model": "app.apicall", "pk": 285, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-04T09:08:39Z", "operation": "identity.CreateUser", "region": "ap-1", "client": "internal service", "source_ip": "203.0.113.136", "outcome": "AccessDenied", "request_id": "e575b7fa-811a-4555-a36e-d50ab1ae5f27" } }, { "model": "app.apicall", "pk": 286, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-15T02:10:20Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.235", "outcome": "Success", "request_id": "1b725136-5d46-4f37-8cb4-e875f591c76a" } }, { "model": "app.apicall", "pk": 287, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-12T12:30:04Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.179", "outcome": "Success", "request_id": "cf6f5c9a-c908-4120-bd7b-e51bac9fee23" } }, { "model": "app.apicall", "pk": 288, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-25T07:40:31Z", "operation": "compute.StartInstance", "region": "us-2", "client": "command line", "source_ip": "192.0.2.55", "outcome": "Success", "request_id": "f1fa1d11-4093-4ac5-aacb-7f6ef1496f11" } }, { "model": "app.apicall", "pk": 289, "fields": { "principal": 48, "account_id": 6, "provider": "aws", "event_time": "2026-01-27T21:28:17Z", "operation": "keys.ScheduleKeyDeletion", "region": "ap-1", "client": "web console", "source_ip": "192.0.2.235", "outcome": "AccessDenied", "request_id": "df45b0c0-0733-476a-9fa4-e0a1a2c1d9cb" } }, { "model": "app.apicall", "pk": 290, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-10T15:11:31Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "web console", "source_ip": "192.0.2.65", "outcome": "Throttled", "request_id": "2d7214a1-5fee-42a3-a1c2-0a7c45bc8690" } }, { "model": "app.apicall", "pk": 291, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-01-31T16:32:54Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.243", "outcome": "Success", "request_id": "86075c66-3f0f-41ab-897d-2b69a435bd0c" } }, { "model": "app.apicall", "pk": 292, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-25T03:43:10Z", "operation": "storage.PutObject", "region": "us-1", "client": "command line", "source_ip": "198.51.100.124", "outcome": "Success", "request_id": "1dc42a57-108a-48d6-93e5-e5241023f441" } }, { "model": "app.apicall", "pk": 293, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-02-21T04:27:08Z", "operation": "identity.ListRoles", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.24", "outcome": "Success", "request_id": "d8662715-49c6-40f3-ab30-b3c86198a6be" } }, { "model": "app.apicall", "pk": 294, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-21T10:56:42Z", "operation": "compute.DescribeInstances", "region": "ap-1", "client": "web console", "source_ip": "198.51.100.169", "outcome": "Success", "request_id": "80d1d4d1-17d1-42f8-bf32-9ff7bf377cd9" } }, { "model": "app.apicall", "pk": 295, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-28T19:04:01Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.68", "outcome": "Success", "request_id": "5fe3c93f-8fe9-430b-a137-87cb6a5cfc95" } }, { "model": "app.apicall", "pk": 296, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-26T19:45:10Z", "operation": "compute.DescribeInstances", "region": "global", "client": "web console", "source_ip": "192.0.2.106", "outcome": "Success", "request_id": "08ef3c7d-517e-4bb7-a7f9-ced2e7a30448" } }, { "model": "app.apicall", "pk": 297, "fields": { "principal": 32, "account_id": 7, "provider": "aws", "event_time": "2026-03-24T17:20:45Z", "operation": "billing.GetCostReport", "region": "global", "client": "internal service", "source_ip": "203.0.113.30", "outcome": "AccessDenied", "request_id": "7e308981-63a6-462a-9ce4-2485d1fc7db8" } }, { "model": "app.apicall", "pk": 298, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-22T14:16:50Z", "operation": "billing.GetCostReport", "region": "global", "client": "command line", "source_ip": "198.51.100.19", "outcome": "Success", "request_id": "f1b9c456-08c9-40cc-838d-f76d7af94ec9" } }, { "model": "app.apicall", "pk": 299, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-21T20:10:13Z", "operation": "storage.PutObject", "region": "us-1", "client": "web console", "source_ip": "198.51.100.76", "outcome": "Success", "request_id": "051bf293-6a53-41a2-ba22-0de3f193cafc" } }, { "model": "app.apicall", "pk": 300, "fields": { "principal": 32, "account_id": 7, "provider": "aws", "event_time": "2026-03-26T11:17:25Z", "operation": "network.OpenIngressRule", "region": "us-1", "client": "command line", "source_ip": "203.0.113.225", "outcome": "Success", "request_id": "d8e4b53c-b2af-48b2-a2c5-ede294ac7b03" } }, { "model": "app.apicall", "pk": 301, "fields": { "principal": 22, "account_id": 4, "provider": "aws", "event_time": "2026-04-15T21:28:58Z", "operation": "storage.GetObject", "region": "ap-1", "client": "internal service", "source_ip": "203.0.113.189", "outcome": "Success", "request_id": "085806cc-39e0-4ce5-8c1e-ac60c6009a91" } }, { "model": "app.apicall", "pk": 302, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-31T06:37:32Z", "operation": "keys.ScheduleKeyDeletion", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.216", "outcome": "Success", "request_id": "918c6ca4-aa27-4782-840c-d62dc9de5b46" } }, { "model": "app.apicall", "pk": 303, "fields": { "principal": 40, "account_id": 5, "provider": "azure", "event_time": "2026-03-25T14:14:19Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.88", "outcome": "Success", "request_id": "446b7d4e-675d-42c3-aa86-758745d7ac08" } }, { "model": "app.apicall", "pk": 304, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-24T10:14:27Z", "operation": "storage.GetObject", "region": "ap-1", "client": "web console", "source_ip": "192.0.2.197", "outcome": "Success", "request_id": "ef78929b-3fb5-4c24-8b22-2faf6ec27444" } }, { "model": "app.apicall", "pk": 305, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-07T09:43:40Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.154", "outcome": "Success", "request_id": "e53982bc-5a14-4bf6-9f03-1e058cd896f2" } }, { "model": "app.apicall", "pk": 306, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-08T15:48:39Z", "operation": "audit.DeleteTrail", "region": "us-2", "client": "infrastructure as code", "source_ip": "192.0.2.205", "outcome": "Success", "request_id": "6ac16c32-2bab-4dd4-8b88-bf984a6654c0" } }, { "model": "app.apicall", "pk": 307, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-24T13:13:55Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.249", "outcome": "NotFound", "request_id": "185177a1-bf52-4677-917d-a6222d4f12bb" } }, { "model": "app.apicall", "pk": 308, "fields": { "principal": 4, "account_id": 1, "provider": "aws", "event_time": "2026-02-18T12:39:27Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.70", "outcome": "Success", "request_id": "490a8e62-80a1-4d98-8388-74a18529ac1a" } }, { "model": "app.apicall", "pk": 309, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-25T15:19:55Z", "operation": "storage.PutObject", "region": "global", "client": "SDK", "source_ip": "203.0.113.230", "outcome": "NotFound", "request_id": "b6603e39-18aa-4cbe-ab8d-6a771c36af03" } }, { "model": "app.apicall", "pk": 310, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-27T09:01:17Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.22", "outcome": "Success", "request_id": "9d9ea975-0e71-4310-bf4b-6e637bba3dac" } }, { "model": "app.apicall", "pk": 311, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-21T19:51:58Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.205", "outcome": "Success", "request_id": "d43d00c8-c3fc-482f-b6ff-793a8b9d3ffd" } }, { "model": "app.apicall", "pk": 312, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-28T16:19:16Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.179", "outcome": "Success", "request_id": "350fe5d8-569c-48b9-843a-2e9746a23686" } }, { "model": "app.apicall", "pk": 313, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-23T14:37:00Z", "operation": "identity.CreateAccessKey", "region": "us-2", "client": "command line", "source_ip": "192.0.2.251", "outcome": "Success", "request_id": "c0bae2ca-3bdc-43b8-9c91-a406e688d195" } }, { "model": "app.apicall", "pk": 314, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-24T06:03:25Z", "operation": "identity.ListRoles", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.190", "outcome": "Success", "request_id": "b2e4894f-7543-4f18-81d8-a80e882214c3" } }, { "model": "app.apicall", "pk": 315, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-27T09:00:25Z", "operation": "keys.Decrypt", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.91", "outcome": "Success", "request_id": "f876c47e-eb51-46dd-a502-f8ba801c6d95" } }, { "model": "app.apicall", "pk": 316, "fields": { "principal": 16, "account_id": 10, "provider": "azure", "event_time": "2026-04-18T13:56:05Z", "operation": "storage.GetObject", "region": "ap-1", "client": "SDK", "source_ip": "203.0.113.233", "outcome": "Success", "request_id": "80eaa168-1e0f-419c-bd26-29472ecf37fd" } }, { "model": "app.apicall", "pk": 317, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-30T01:42:39Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.160", "outcome": "Success", "request_id": "fd031f08-8e9a-41c3-9695-cde907d4f543" } }, { "model": "app.apicall", "pk": 318, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-11T05:07:27Z", "operation": "storage.GetObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.69", "outcome": "Success", "request_id": "8be4a7b3-ddda-4fd4-b35e-0278c175bf23" } }, { "model": "app.apicall", "pk": 319, "fields": { "principal": 5, "account_id": 4, "provider": "aws", "event_time": "2026-04-24T23:35:08Z", "operation": "identity.ListRoles", "region": "global", "client": "web console", "source_ip": "192.0.2.27", "outcome": "Success", "request_id": "ea66ec51-c4c5-44df-a7c2-93bad33cb5dd" } }, { "model": "app.apicall", "pk": 320, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-20T17:20:12Z", "operation": "storage.PutObject", "region": "ap-1", "client": "web console", "source_ip": "198.51.100.178", "outcome": "Success", "request_id": "42e2038d-626a-4907-aa7d-b216bb16a6f8" } }, { "model": "app.apicall", "pk": 321, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-04-28T17:43:58Z", "operation": "storage.GetObject", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.69", "outcome": "NotFound", "request_id": "5f244c21-9d9f-4ff7-95b5-77aba2c8c953" } }, { "model": "app.apicall", "pk": 322, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-13T07:37:56Z", "operation": "compute.DescribeInstances", "region": "global", "client": "web console", "source_ip": "192.0.2.176", "outcome": "Success", "request_id": "a6879928-8111-47b6-b2a3-472c64084923" } }, { "model": "app.apicall", "pk": 323, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-12T05:00:56Z", "operation": "storage.ListBuckets", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.173", "outcome": "AccessDenied", "request_id": "22a9060e-79c4-4916-b32b-da5a7b41f81f" } }, { "model": "app.apicall", "pk": 324, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-23T05:43:21Z", "operation": "storage.GetObject", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.231", "outcome": "Success", "request_id": "76daff59-b646-4e5d-99fb-f040e4f91556" } }, { "model": "app.apicall", "pk": 325, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-15T15:48:14Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "198.51.100.70", "outcome": "Success", "request_id": "3a0ecf92-fd00-47d9-96eb-b74567e3eccd" } }, { "model": "app.apicall", "pk": 326, "fields": { "principal": 22, "account_id": 4, "provider": "aws", "event_time": "2026-04-18T02:30:56Z", "operation": "storage.GetObject", "region": "eu-1", "client": "internal service", "source_ip": "192.0.2.233", "outcome": "Success", "request_id": "236dac1d-2772-459d-9ace-db92c2a250b9" } }, { "model": "app.apicall", "pk": 327, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-04-04T10:33:52Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.197", "outcome": "Success", "request_id": "ff69b075-2e33-4a7c-ba39-f3fc9b3b4e31" } }, { "model": "app.apicall", "pk": 328, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-12T05:48:59Z", "operation": "identity.CreateUser", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.72", "outcome": "Success", "request_id": "b5f7f7d2-ec47-4a10-9e7b-6a28bebfd418" } }, { "model": "app.apicall", "pk": 329, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-05-29T09:39:22Z", "operation": "keys.Decrypt", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.234", "outcome": "Success", "request_id": "f882543a-a159-41e2-9a86-471fc7b14028" } }, { "model": "app.apicall", "pk": 330, "fields": { "principal": 6, "account_id": 12, "provider": "azure", "event_time": "2026-01-26T20:14:09Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.223", "outcome": "Success", "request_id": "14d43f19-8dc6-49d9-bd71-21eb2d0d5eeb" } }, { "model": "app.apicall", "pk": 331, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-10T11:27:11Z", "operation": "identity.ListRoles", "region": "us-2", "client": "internal service", "source_ip": "192.0.2.55", "outcome": "Success", "request_id": "5e6c89e5-17c2-4d49-b1b5-078cb1ea39bf" } }, { "model": "app.apicall", "pk": 332, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-08T07:07:39Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "SDK", "source_ip": "203.0.113.133", "outcome": "AccessDenied", "request_id": "cf9976af-1998-48cd-a69e-972c12e2e2e3" } }, { "model": "app.apicall", "pk": 333, "fields": { "principal": 6, "account_id": 12, "provider": "azure", "event_time": "2026-01-28T18:24:09Z", "operation": "storage.GetObject", "region": "eu-1", "client": "internal service", "source_ip": "192.0.2.97", "outcome": "Success", "request_id": "a6ae1efb-ad89-4791-8d12-b43c2ba3012c" } }, { "model": "app.apicall", "pk": 334, "fields": { "principal": 6, "account_id": 12, "provider": "azure", "event_time": "2026-01-30T18:40:51Z", "operation": "storage.GetObject", "region": "us-2", "client": "web console", "source_ip": "203.0.113.206", "outcome": "AccessDenied", "request_id": "a52bdbdc-c5d8-40f3-858d-42d844446a85" } }, { "model": "app.apicall", "pk": 335, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-07T04:22:59Z", "operation": "storage.PutObject", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.192", "outcome": "Success", "request_id": "93569947-6565-4bf3-8fea-d641d90eacc9" } }, { "model": "app.apicall", "pk": 336, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-12T01:15:55Z", "operation": "storage.GetObject", "region": "eu-1", "client": "web console", "source_ip": "198.51.100.41", "outcome": "Success", "request_id": "d8a8d89c-0982-41fa-8d53-4a6b7394c003" } }, { "model": "app.apicall", "pk": 337, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-01T01:33:58Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.229", "outcome": "Success", "request_id": "20bb461a-3a31-468f-b440-d65498e405a3" } }, { "model": "app.apicall", "pk": 338, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-09T22:38:46Z", "operation": "storage.GetObject", "region": "eu-2", "client": "command line", "source_ip": "203.0.113.154", "outcome": "Success", "request_id": "f0a52c79-f448-40d2-8c9e-2b1487d27f13" } }, { "model": "app.apicall", "pk": 339, "fields": { "principal": 4, "account_id": 1, "provider": "aws", "event_time": "2026-02-20T15:20:56Z", "operation": "storage.GetObject", "region": "global", "client": "web console", "source_ip": "203.0.113.92", "outcome": "Success", "request_id": "b165f672-4a60-4005-b5e7-06e262d85613" } }, { "model": "app.apicall", "pk": 340, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-19T00:10:47Z", "operation": "storage.ListBuckets", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.208", "outcome": "Success", "request_id": "f8a98cc5-2472-4a00-807b-9cb0f9e32c0e" } }, { "model": "app.apicall", "pk": 341, "fields": { "principal": 48, "account_id": 6, "provider": "aws", "event_time": "2026-01-28T00:58:43Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.4", "outcome": "Throttled", "request_id": "d347ca38-0907-42e6-a514-94d042b85472" } }, { "model": "app.apicall", "pk": 342, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-28T11:31:48Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "command line", "source_ip": "198.51.100.125", "outcome": "Success", "request_id": "944e6907-77e0-4254-86f6-77800ee65f2e" } }, { "model": "app.apicall", "pk": 343, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-22T05:45:03Z", "operation": "storage.PutObject", "region": "us-2", "client": "internal service", "source_ip": "192.0.2.79", "outcome": "Success", "request_id": "16df3242-4ae0-4a71-a57f-053b5da5d155" } }, { "model": "app.apicall", "pk": 344, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-10T06:52:41Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.45", "outcome": "Success", "request_id": "e4f9fceb-20b7-4cf9-963a-1186e8cdda4f" } }, { "model": "app.apicall", "pk": 345, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-25T23:22:45Z", "operation": "storage.PutObject", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.195", "outcome": "Success", "request_id": "07c795ad-cc77-4264-ab62-b747b1057dc0" } }, { "model": "app.apicall", "pk": 346, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-21T11:33:26Z", "operation": "identity.CreateUser", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.126", "outcome": "Success", "request_id": "771f7ba2-360e-43a0-bf2a-04f55d119626" } }, { "model": "app.apicall", "pk": 347, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-10T08:25:38Z", "operation": "keys.Decrypt", "region": "us-2", "client": "command line", "source_ip": "198.51.100.213", "outcome": "Success", "request_id": "2f2f9eec-7444-4290-a338-4c318f4b1d8a" } }, { "model": "app.apicall", "pk": 348, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-05-31T00:46:19Z", "operation": "storage.GetObject", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.138", "outcome": "Success", "request_id": "f0aadb77-fe80-4589-be17-54c687557314" } }, { "model": "app.apicall", "pk": 349, "fields": { "principal": 17, "account_id": 11, "provider": "aws", "event_time": "2026-05-11T14:26:04Z", "operation": "storage.GetObject", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.210", "outcome": "Success", "request_id": "dd1d1c78-c1c7-430b-b229-deb1e66953d7" } }, { "model": "app.apicall", "pk": 350, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-02-23T21:21:03Z", "operation": "storage.GetObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.85", "outcome": "Success", "request_id": "70d53d94-fb1e-4d47-a090-5cdbf8a453d9" } }, { "model": "app.apicall", "pk": 351, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-26T00:35:54Z", "operation": "compute.DescribeInstances", "region": "global", "client": "internal service", "source_ip": "192.0.2.114", "outcome": "Success", "request_id": "2b9a78df-bf7b-4b4f-90d1-96c3262bc443" } }, { "model": "app.apicall", "pk": 352, "fields": { "principal": 17, "account_id": 11, "provider": "aws", "event_time": "2026-05-11T17:07:41Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.125", "outcome": "Success", "request_id": "9d9e83f1-4a5b-4cdb-b166-f05fbd6544d1" } }, { "model": "app.apicall", "pk": 353, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-22T19:56:47Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.144", "outcome": "NotFound", "request_id": "3b6a395a-3f06-4305-b8ac-9f058675b11d" } }, { "model": "app.apicall", "pk": 354, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-02-02T12:50:44Z", "operation": "compute.StartInstance", "region": "global", "client": "internal service", "source_ip": "192.0.2.219", "outcome": "Success", "request_id": "a210e856-1e52-42cc-b19b-2eafcec8d723" } }, { "model": "app.apicall", "pk": 355, "fields": { "principal": 6, "account_id": 12, "provider": "azure", "event_time": "2026-02-01T20:52:19Z", "operation": "keys.Decrypt", "region": "global", "client": "internal service", "source_ip": "192.0.2.107", "outcome": "Success", "request_id": "d4c44c2c-d1e4-435b-9d47-2b02e2efc7ee" } }, { "model": "app.apicall", "pk": 356, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-25T12:03:51Z", "operation": "storage.PutObject", "region": "eu-2", "client": "command line", "source_ip": "203.0.113.200", "outcome": "Success", "request_id": "1d74edb9-7fcc-4278-8666-efb92bd38b3b" } }, { "model": "app.apicall", "pk": 357, "fields": { "principal": 34, "account_id": 6, "provider": "aws", "event_time": "2026-04-08T00:14:42Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.247", "outcome": "Success", "request_id": "d081563d-0382-402c-a41b-6bcbfc4acad0" } }, { "model": "app.apicall", "pk": 358, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-12T07:17:52Z", "operation": "storage.GetObject", "region": "us-2", "client": "web console", "source_ip": "192.0.2.200", "outcome": "Success", "request_id": "ee1310a0-feca-4dfe-a7dc-e7c2df9dd63b" } }, { "model": "app.apicall", "pk": 359, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-26T04:33:33Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "web console", "source_ip": "198.51.100.91", "outcome": "Success", "request_id": "17d93fd7-89ca-42ab-a2f9-8b9c5add1de7" } }, { "model": "app.apicall", "pk": 360, "fields": { "principal": 45, "account_id": 1, "provider": "aws", "event_time": "2026-02-11T07:41:47Z", "operation": "compute.StartInstance", "region": "us-2", "client": "web console", "source_ip": "198.51.100.161", "outcome": "Success", "request_id": "e48cc110-9ee6-482a-a927-c3b704ffb71b" } }, { "model": "app.apicall", "pk": 361, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-04-01T22:44:32Z", "operation": "identity.AttachAdminPolicy", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.37", "outcome": "Success", "request_id": "364d9609-81a4-476e-af9a-d0ffbcfb1dad" } }, { "model": "app.apicall", "pk": 362, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-04-04T07:30:24Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.80", "outcome": "Success", "request_id": "6d10ff4a-b8d0-4686-bead-09bce588f0df" } }, { "model": "app.apicall", "pk": 363, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-29T13:52:31Z", "operation": "identity.AttachAdminPolicy", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.49", "outcome": "Success", "request_id": "9a51be31-d419-48d1-8810-9d17533ba13b" } }, { "model": "app.apicall", "pk": 364, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-12T10:36:07Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.13", "outcome": "Success", "request_id": "b1f5dffc-a1af-47f6-8f0c-9c6263fe6596" } }, { "model": "app.apicall", "pk": 365, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-08T10:54:57Z", "operation": "storage.SetBucketPolicy", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.119", "outcome": "Success", "request_id": "79a50706-a668-400a-9624-e881fe3c9eaa" } }, { "model": "app.apicall", "pk": 366, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-13T23:30:08Z", "operation": "compute.DeleteInstance", "region": "ap-1", "client": "SDK", "source_ip": "198.51.100.233", "outcome": "Success", "request_id": "97d69ec8-5ea7-4a0e-b9d3-e7ef8c18bd8a" } }, { "model": "app.apicall", "pk": 367, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-15T20:14:36Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "internal service", "source_ip": "192.0.2.223", "outcome": "Success", "request_id": "1d1393e9-5ad9-4450-bc67-be58b8f2202f" } }, { "model": "app.apicall", "pk": 368, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-25T03:17:18Z", "operation": "compute.StartInstance", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.118", "outcome": "Success", "request_id": "f838a2fb-487f-4233-baf6-46bd57d9159a" } }, { "model": "app.apicall", "pk": 369, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-11T18:23:54Z", "operation": "audit.StopLogging", "region": "ap-1", "client": "command line", "source_ip": "192.0.2.194", "outcome": "Success", "request_id": "1a56bbed-08a6-49fb-8f7b-64fc3f6993ec" } }, { "model": "app.apicall", "pk": 370, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-13T01:41:33Z", "operation": "identity.ListRoles", "region": "global", "client": "web console", "source_ip": "203.0.113.147", "outcome": "Success", "request_id": "9205a61e-d63e-4ac1-bbda-61312ea63e72" } }, { "model": "app.apicall", "pk": 371, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-27T17:47:11Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "infrastructure as code", "source_ip": "192.0.2.186", "outcome": "Success", "request_id": "7965f02c-5c1e-48de-b27f-560aec393c7c" } }, { "model": "app.apicall", "pk": 372, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-12T15:41:30Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.165", "outcome": "Success", "request_id": "6c6ee57c-462b-4f54-8611-9f1e69fc5e0f" } }, { "model": "app.apicall", "pk": 373, "fields": { "principal": 40, "account_id": 5, "provider": "azure", "event_time": "2026-03-25T19:46:19Z", "operation": "identity.CreateAccessKey", "region": "eu-2", "client": "infrastructure as code", "source_ip": "192.0.2.207", "outcome": "Success", "request_id": "407a7ec8-8a23-4bc5-8162-f78165298dac" } }, { "model": "app.apicall", "pk": 374, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-26T15:34:41Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "198.51.100.177", "outcome": "Success", "request_id": "f4c09c5d-e42c-4e52-8ce5-4c72adeec214" } }, { "model": "app.apicall", "pk": 375, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-14T23:33:52Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.147", "outcome": "Success", "request_id": "9cd2a401-3805-47a2-bcf5-bba3c8c6c6db" } }, { "model": "app.apicall", "pk": 376, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-28T17:22:48Z", "operation": "storage.SetBucketPolicy", "region": "ap-1", "client": "internal service", "source_ip": "203.0.113.99", "outcome": "AccessDenied", "request_id": "5f270cd4-48a0-4881-9ddd-57634429cb61" } }, { "model": "app.apicall", "pk": 377, "fields": { "principal": 37, "account_id": 8, "provider": "aws", "event_time": "2026-01-25T17:03:33Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "command line", "source_ip": "203.0.113.126", "outcome": "Success", "request_id": "2e851692-3ce8-428b-acb2-5619950c9e0c" } }, { "model": "app.apicall", "pk": 378, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-04-28T05:18:05Z", "operation": "storage.GetObject", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.79", "outcome": "Success", "request_id": "1dec8f9d-9ea4-4e2e-bd57-0c05d2f816a1" } }, { "model": "app.apicall", "pk": 379, "fields": { "principal": 26, "account_id": 12, "provider": "azure", "event_time": "2026-02-16T04:35:58Z", "operation": "compute.DescribeInstances", "region": "eu-2", "client": "infrastructure as code", "source_ip": "192.0.2.249", "outcome": "Success", "request_id": "f6cfcc33-46ba-4c47-af65-b1298ef82437" } }, { "model": "app.apicall", "pk": 380, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-13T23:45:19Z", "operation": "identity.CreateUser", "region": "us-1", "client": "command line", "source_ip": "198.51.100.89", "outcome": "Success", "request_id": "77beacf6-8f09-4872-a1c5-982474a6c725" } }, { "model": "app.apicall", "pk": 381, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-04-04T17:08:02Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "SDK", "source_ip": "198.51.100.171", "outcome": "Success", "request_id": "fadb052c-f287-4288-9526-1ddf1b18c52d" } }, { "model": "app.apicall", "pk": 382, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-01T01:00:59Z", "operation": "storage.GetObject", "region": "ap-1", "client": "SDK", "source_ip": "203.0.113.244", "outcome": "Success", "request_id": "7b96df45-61cb-4757-be74-50c1f6b1bc25" } }, { "model": "app.apicall", "pk": 383, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-28T01:38:24Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "command line", "source_ip": "198.51.100.120", "outcome": "Success", "request_id": "64edc620-fcec-4e51-aec7-8cd7a08e749b" } }, { "model": "app.apicall", "pk": 384, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-04-07T04:16:35Z", "operation": "storage.PutObject", "region": "eu-2", "client": "internal service", "source_ip": "192.0.2.136", "outcome": "Success", "request_id": "dbdb5680-8067-42ff-8179-ceee07d3ab02" } }, { "model": "app.apicall", "pk": 385, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-03T00:34:00Z", "operation": "identity.ListRoles", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.152", "outcome": "Success", "request_id": "a47bf5be-9c61-49f2-9b54-36a6865c9548" } }, { "model": "app.apicall", "pk": 386, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-04-28T16:48:01Z", "operation": "storage.ListBuckets", "region": "us-2", "client": "web console", "source_ip": "192.0.2.162", "outcome": "Success", "request_id": "bbeb24aa-f435-4990-be2e-2518c49fd93c" } }, { "model": "app.apicall", "pk": 387, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-13T21:52:14Z", "operation": "storage.PutObject", "region": "ap-1", "client": "internal service", "source_ip": "203.0.113.147", "outcome": "Success", "request_id": "d566c659-4c39-4fb2-b0aa-5667742c3881" } }, { "model": "app.apicall", "pk": 388, "fields": { "principal": 60, "account_id": 2, "provider": "azure", "event_time": "2026-02-26T22:53:13Z", "operation": "compute.DescribeInstances", "region": "ap-1", "client": "infrastructure as code", "source_ip": "192.0.2.9", "outcome": "Success", "request_id": "6f37c5e4-34f8-42f3-971d-1ac09eea2208" } }, { "model": "app.apicall", "pk": 389, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-03-31T10:51:09Z", "operation": "storage.PutObject", "region": "eu-2", "client": "command line", "source_ip": "203.0.113.101", "outcome": "Success", "request_id": "93d69652-33a4-4b23-8b30-0b1923d8e854" } }, { "model": "app.apicall", "pk": 390, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-18T00:38:28Z", "operation": "storage.SetBucketPolicy", "region": "global", "client": "SDK", "source_ip": "192.0.2.179", "outcome": "Success", "request_id": "e7454db0-c582-4c32-8b36-28fefc455391" } }, { "model": "app.apicall", "pk": 391, "fields": { "principal": 50, "account_id": 9, "provider": "aws", "event_time": "2026-01-08T14:15:14Z", "operation": "storage.GetObject", "region": "global", "client": "web console", "source_ip": "198.51.100.131", "outcome": "Success", "request_id": "2bd3da19-1fe7-4541-9270-14f22d9dfe19" } }, { "model": "app.apicall", "pk": 392, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-02-28T07:53:04Z", "operation": "storage.PutObject", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.2", "outcome": "Success", "request_id": "2edb990a-b6f7-461d-afc0-f5e0ae88c6a7" } }, { "model": "app.apicall", "pk": 393, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-06-01T21:03:08Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.165", "outcome": "Success", "request_id": "6bd04257-6c37-4f95-b3dd-b263ed3b263c" } }, { "model": "app.apicall", "pk": 394, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-30T14:07:20Z", "operation": "storage.GetObject", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.141", "outcome": "Success", "request_id": "0fcef7fb-9870-4c4a-b1bf-ddc57f084c75" } }, { "model": "app.apicall", "pk": 395, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-23T10:29:24Z", "operation": "network.OpenIngressRule", "region": "global", "client": "command line", "source_ip": "203.0.113.42", "outcome": "Success", "request_id": "86ba851d-9e78-450a-9026-94bb210886ad" } }, { "model": "app.apicall", "pk": 396, "fields": { "principal": 49, "account_id": 9, "provider": "aws", "event_time": "2026-05-25T20:18:07Z", "operation": "storage.GetObject", "region": "us-2", "client": "SDK", "source_ip": "192.0.2.79", "outcome": "Success", "request_id": "03b5148f-df98-413f-991d-76b7d718cad0" } }, { "model": "app.apicall", "pk": 397, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-16T17:31:20Z", "operation": "storage.GetObject", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.15", "outcome": "Success", "request_id": "2c4065e0-976d-46e5-a216-d7ce477423a1" } }, { "model": "app.apicall", "pk": 398, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-06-04T18:26:53Z", "operation": "identity.ListRoles", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.215", "outcome": "Success", "request_id": "275b9f8b-0e46-4531-85dd-361e698d5353" } }, { "model": "app.apicall", "pk": 399, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-04-03T07:00:21Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.223", "outcome": "Success", "request_id": "4ead917b-85f5-495f-8d44-0ad1e5eacb6c" } }, { "model": "app.apicall", "pk": 400, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-01-31T17:03:35Z", "operation": "storage.ListBuckets", "region": "global", "client": "web console", "source_ip": "192.0.2.246", "outcome": "Success", "request_id": "795e80de-515a-4cc9-8e5c-2640d1f64edb" } }, { "model": "app.apicall", "pk": 401, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-07T07:03:39Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "203.0.113.72", "outcome": "Success", "request_id": "a1b0547d-ecc2-47ae-b3d0-df798e5cbefe" } }, { "model": "app.apicall", "pk": 402, "fields": { "principal": 34, "account_id": 6, "provider": "aws", "event_time": "2026-04-10T06:43:49Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "203.0.113.159", "outcome": "Success", "request_id": "c3453f94-6af2-4acb-a033-0bf04aaffd7a" } }, { "model": "app.apicall", "pk": 403, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-02-03T00:04:16Z", "operation": "storage.GetObject", "region": "eu-2", "client": "command line", "source_ip": "192.0.2.140", "outcome": "Success", "request_id": "b2786274-8c67-4d39-aeef-8949a6014e04" } }, { "model": "app.apicall", "pk": 404, "fields": { "principal": 58, "account_id": 1, "provider": "aws", "event_time": "2026-02-20T02:42:15Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "command line", "source_ip": "203.0.113.184", "outcome": "Success", "request_id": "8150799d-21ed-4548-bb1f-184df0253772" } }, { "model": "app.apicall", "pk": 405, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-03-31T10:58:50Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.64", "outcome": "Success", "request_id": "11d882f4-208e-46df-8e5a-ea0ed410177d" } }, { "model": "app.apicall", "pk": 406, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-18T01:08:58Z", "operation": "compute.StartInstance", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.34", "outcome": "Success", "request_id": "6611b5a4-0afb-49d7-82a1-c62679540026" } }, { "model": "app.apicall", "pk": 407, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-12T21:48:41Z", "operation": "billing.GetCostReport", "region": "ap-1", "client": "internal service", "source_ip": "198.51.100.156", "outcome": "Success", "request_id": "a0870a01-73c1-400c-9fd7-b529d6809d86" } }, { "model": "app.apicall", "pk": 408, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-03T18:32:02Z", "operation": "storage.GetObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.148", "outcome": "Success", "request_id": "cb8ec6ed-43ca-4a22-bf22-ae7e01749319" } }, { "model": "app.apicall", "pk": 409, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-11T11:48:50Z", "operation": "compute.DescribeInstances", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.187", "outcome": "Success", "request_id": "37a6640f-e672-4fc0-8973-f48dd348e67f" } }, { "model": "app.apicall", "pk": 410, "fields": { "principal": 5, "account_id": 4, "provider": "aws", "event_time": "2026-04-25T22:34:15Z", "operation": "storage.PutObject", "region": "ap-1", "client": "command line", "source_ip": "192.0.2.72", "outcome": "Success", "request_id": "20bfdf45-a6a0-4e13-a8bf-daf74dd54d1f" } }, { "model": "app.apicall", "pk": 411, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-12T16:49:49Z", "operation": "compute.DeleteInstance", "region": "us-2", "client": "infrastructure as code", "source_ip": "192.0.2.118", "outcome": "Success", "request_id": "7a75bf3a-28d8-4a36-b6d1-075ec86f9ba2" } }, { "model": "app.apicall", "pk": 412, "fields": { "principal": 21, "account_id": 8, "provider": "aws", "event_time": "2026-05-01T19:05:31Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.211", "outcome": "AccessDenied", "request_id": "f708d42f-3e6c-4885-bc77-69e5379a7fcf" } }, { "model": "app.apicall", "pk": 413, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-03-31T08:10:16Z", "operation": "compute.DescribeInstances", "region": "global", "client": "web console", "source_ip": "198.51.100.233", "outcome": "Success", "request_id": "6a492b07-84c1-4df1-9c4e-074d9842e2fc" } }, { "model": "app.apicall", "pk": 414, "fields": { "principal": 17, "account_id": 11, "provider": "aws", "event_time": "2026-05-13T20:04:53Z", "operation": "audit.DeleteTrail", "region": "global", "client": "command line", "source_ip": "192.0.2.96", "outcome": "Success", "request_id": "bdad3b4e-aa38-47cc-a368-6907bd138cb9" } }, { "model": "app.apicall", "pk": 415, "fields": { "principal": 8, "account_id": 6, "provider": "aws", "event_time": "2026-02-28T00:51:52Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "internal service", "source_ip": "198.51.100.77", "outcome": "Success", "request_id": "f912b331-1acd-4f01-a0d7-5edb89118428" } }, { "model": "app.apicall", "pk": 416, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-26T13:52:04Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "internal service", "source_ip": "198.51.100.40", "outcome": "Success", "request_id": "9d440fd4-39b2-4215-b03c-b79d298e4512" } }, { "model": "app.apicall", "pk": 417, "fields": { "principal": 17, "account_id": 11, "provider": "aws", "event_time": "2026-05-16T03:14:59Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.37", "outcome": "Success", "request_id": "32fca519-cf8e-4349-9281-773b2a34b44b" } }, { "model": "app.apicall", "pk": 418, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-02-05T12:05:57Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "internal service", "source_ip": "192.0.2.99", "outcome": "Success", "request_id": "0b418bd5-cc5d-4432-b7b9-99941f5fa658" } }, { "model": "app.apicall", "pk": 419, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-05-01T16:05:11Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.49", "outcome": "Success", "request_id": "8e631ec5-55e3-4b41-accd-017b9dfa5a11" } }, { "model": "app.apicall", "pk": 420, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-05-03T13:54:38Z", "operation": "storage.GetObject", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.174", "outcome": "Success", "request_id": "067e66cf-2915-4e3b-bc54-e86b3dac8f95" } }, { "model": "app.apicall", "pk": 421, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-16T23:16:17Z", "operation": "identity.ListRoles", "region": "us-1", "client": "internal service", "source_ip": "198.51.100.58", "outcome": "Success", "request_id": "069895ed-4b24-4e3e-9bc6-949bb34f4357" } }, { "model": "app.apicall", "pk": 422, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-06-08T15:09:08Z", "operation": "audit.StopLogging", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.219", "outcome": "Success", "request_id": "74c6a3b1-6ccd-4fec-80a0-baa5d90aeb74" } }, { "model": "app.apicall", "pk": 423, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-04-06T05:35:13Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.250", "outcome": "Success", "request_id": "be57abb5-452e-4343-9d8e-ca43b9f41c98" } }, { "model": "app.apicall", "pk": 424, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-12T15:39:14Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.5", "outcome": "AccessDenied", "request_id": "4267e78a-b163-423d-88aa-b1afa61eb6ab" } }, { "model": "app.apicall", "pk": 425, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-01T15:22:40Z", "operation": "storage.GetObject", "region": "ap-1", "client": "command line", "source_ip": "192.0.2.171", "outcome": "Success", "request_id": "2e5c7214-7420-4b69-8e9c-9fc040605cc2" } }, { "model": "app.apicall", "pk": 426, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-02-05T09:32:33Z", "operation": "identity.AttachAdminPolicy", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.43", "outcome": "Success", "request_id": "4d498245-11e5-4de4-999a-6b8b8a82de55" } }, { "model": "app.apicall", "pk": 427, "fields": { "principal": 8, "account_id": 6, "provider": "aws", "event_time": "2026-03-02T15:24:20Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.138", "outcome": "Success", "request_id": "e54b57ce-9647-481b-8764-1a3f3b8148d3" } }, { "model": "app.apicall", "pk": 428, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-02-05T11:31:01Z", "operation": "identity.ListRoles", "region": "ap-1", "client": "infrastructure as code", "source_ip": "198.51.100.93", "outcome": "Success", "request_id": "b6edf587-d9b3-4263-b944-a12d7278dc07" } }, { "model": "app.apicall", "pk": 429, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-03-03T05:04:28Z", "operation": "billing.GetCostReport", "region": "ap-1", "client": "infrastructure as code", "source_ip": "203.0.113.181", "outcome": "Success", "request_id": "e24841c2-2495-4222-a117-260a4655df4e" } }, { "model": "app.apicall", "pk": 430, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-13T01:25:09Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "web console", "source_ip": "192.0.2.63", "outcome": "Success", "request_id": "6bbcb0b4-e627-4bf9-b952-f234f19a2b06" } }, { "model": "app.apicall", "pk": 431, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-28T04:22:54Z", "operation": "storage.GetObject", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.252", "outcome": "Success", "request_id": "8edb2d54-fdc5-4480-8946-b4b8492f1cc9" } }, { "model": "app.apicall", "pk": 432, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-14T05:53:44Z", "operation": "identity.ListRoles", "region": "ap-1", "client": "command line", "source_ip": "203.0.113.51", "outcome": "Success", "request_id": "735b86ed-b6f4-46b3-8d93-390ae29db5d8" } }, { "model": "app.apicall", "pk": 433, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-02-08T02:20:07Z", "operation": "storage.GetObject", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.15", "outcome": "Success", "request_id": "adbec934-11c9-411d-9ae3-47bf60b39419" } }, { "model": "app.apicall", "pk": 434, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-28T19:40:52Z", "operation": "compute.DescribeInstances", "region": "eu-2", "client": "infrastructure as code", "source_ip": "192.0.2.117", "outcome": "Success", "request_id": "a0b8dd4b-1737-4d21-bfff-a0b72209e550" } }, { "model": "app.apicall", "pk": 435, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-16T14:32:57Z", "operation": "storage.PutObject", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.226", "outcome": "Success", "request_id": "1174cc0d-3d61-4e86-bb56-85a976d876e7" } }, { "model": "app.apicall", "pk": 436, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-19T07:47:54Z", "operation": "storage.GetObject", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.44", "outcome": "Success", "request_id": "ce930a2e-e0be-47fb-ab02-9ec380e82c95" } }, { "model": "app.apicall", "pk": 437, "fields": { "principal": 19, "account_id": 5, "provider": "azure", "event_time": "2026-02-20T21:57:31Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.38", "outcome": "Success", "request_id": "23df7b03-437d-48e5-91f8-1ed5c9900010" } }, { "model": "app.apicall", "pk": 438, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-01-30T22:30:56Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.172", "outcome": "Success", "request_id": "d2fe519e-beae-4bd4-b9f9-3d5eee70236b" } }, { "model": "app.apicall", "pk": 439, "fields": { "principal": 22, "account_id": 4, "provider": "aws", "event_time": "2026-04-18T13:38:43Z", "operation": "storage.GetObject", "region": "global", "client": "command line", "source_ip": "198.51.100.115", "outcome": "Success", "request_id": "a48c8574-969d-4f3e-925e-6a8a999e6d18" } }, { "model": "app.apicall", "pk": 440, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-20T20:54:14Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.80", "outcome": "NotFound", "request_id": "7ddcfebe-4eaa-4c90-8191-bbe9774c4cb1" } }, { "model": "app.apicall", "pk": 441, "fields": { "principal": 22, "account_id": 4, "provider": "aws", "event_time": "2026-04-20T08:54:34Z", "operation": "identity.ListRoles", "region": "global", "client": "web console", "source_ip": "198.51.100.216", "outcome": "Success", "request_id": "43cbbfc8-8ea7-43ca-9b02-69a81554b8df" } }, { "model": "app.apicall", "pk": 442, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-04-01T18:19:40Z", "operation": "storage.ListBuckets", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.109", "outcome": "Success", "request_id": "886cdb07-9c94-4814-aa41-53f0f84b9c8a" } }, { "model": "app.apicall", "pk": 443, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-23T04:51:20Z", "operation": "identity.ListRoles", "region": "global", "client": "internal service", "source_ip": "198.51.100.48", "outcome": "Success", "request_id": "bb00263d-2d30-46ce-8644-92f547295636" } }, { "model": "app.apicall", "pk": 444, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-15T13:55:59Z", "operation": "identity.AttachAdminPolicy", "region": "global", "client": "infrastructure as code", "source_ip": "203.0.113.233", "outcome": "Success", "request_id": "eab6a5b6-b123-4957-9016-a54a974b369d" } }, { "model": "app.apicall", "pk": 445, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-18T00:41:50Z", "operation": "storage.PutObject", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.61", "outcome": "Success", "request_id": "502a6f30-6ad4-4872-a0f1-552f55e487c2" } }, { "model": "app.apicall", "pk": 446, "fields": { "principal": 19, "account_id": 5, "provider": "azure", "event_time": "2026-02-22T16:11:22Z", "operation": "storage.GetObject", "region": "us-2", "client": "internal service", "source_ip": "198.51.100.210", "outcome": "Success", "request_id": "0a5971e0-af8d-4bbd-861b-34639614401c" } }, { "model": "app.apicall", "pk": 447, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-03T16:00:47Z", "operation": "identity.CreateAccessKey", "region": "global", "client": "internal service", "source_ip": "192.0.2.126", "outcome": "Success", "request_id": "2b583bd8-3d7d-4196-81c5-80fe636fb49c" } }, { "model": "app.apicall", "pk": 448, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-05T19:08:19Z", "operation": "identity.ListRoles", "region": "global", "client": "command line", "source_ip": "192.0.2.54", "outcome": "Success", "request_id": "7ee92f73-244c-4746-bbf0-cc2d245fcf50" } }, { "model": "app.apicall", "pk": 449, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-05-06T14:40:52Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.1", "outcome": "Success", "request_id": "68552448-98ee-4e2b-9305-35fdccb01945" } }, { "model": "app.apicall", "pk": 450, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-05-31T10:58:04Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "192.0.2.109", "outcome": "Success", "request_id": "ff5be926-f086-4053-bb95-6abb6323b06e" } }, { "model": "app.apicall", "pk": 451, "fields": { "principal": 8, "account_id": 6, "provider": "aws", "event_time": "2026-03-04T04:48:08Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.206", "outcome": "Success", "request_id": "e6f45154-cd9e-4b3f-b9cb-57f57abac241" } }, { "model": "app.apicall", "pk": 452, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-08T18:02:48Z", "operation": "audit.StopLogging", "region": "eu-2", "client": "SDK", "source_ip": "192.0.2.136", "outcome": "Success", "request_id": "896fadef-c566-4e99-8128-ad78750c604c" } }, { "model": "app.apicall", "pk": 453, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-15T23:36:52Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "203.0.113.110", "outcome": "Success", "request_id": "bc6e4bc1-876c-4e4b-ae17-ec9b3c5ea228" } }, { "model": "app.apicall", "pk": 454, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-04-02T09:57:19Z", "operation": "compute.StartInstance", "region": "global", "client": "web console", "source_ip": "192.0.2.169", "outcome": "Success", "request_id": "0bc95b83-f8ec-4cb6-811b-1945aa3ff8b9" } }, { "model": "app.apicall", "pk": 455, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-14T17:53:42Z", "operation": "storage.PutObject", "region": "eu-2", "client": "SDK", "source_ip": "198.51.100.47", "outcome": "ValidationError", "request_id": "9a3a94de-42cf-4401-85c7-4b169193feef" } }, { "model": "app.apicall", "pk": 456, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-02-25T18:11:10Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.208", "outcome": "Success", "request_id": "4cbceb35-aeec-421e-8ca5-a6fb518a588a" } }, { "model": "app.apicall", "pk": 457, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-03-29T02:10:21Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.128", "outcome": "Success", "request_id": "d88a93dc-41d0-4cce-a15e-1e183783bab6" } }, { "model": "app.apicall", "pk": 458, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-02-26T14:40:14Z", "operation": "compute.DescribeInstances", "region": "eu-2", "client": "SDK", "source_ip": "192.0.2.254", "outcome": "Success", "request_id": "18e48e13-583c-4643-ad65-9dc4ffe71d20" } }, { "model": "app.apicall", "pk": 459, "fields": { "principal": 42, "account_id": 2, "provider": "azure", "event_time": "2026-02-07T14:46:44Z", "operation": "storage.SetBucketPolicy", "region": "us-1", "client": "command line", "source_ip": "203.0.113.3", "outcome": "Success", "request_id": "0c12124d-3fb1-4eb7-836a-b2564c1d5b8f" } }, { "model": "app.apicall", "pk": 460, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-13T10:54:40Z", "operation": "identity.ListRoles", "region": "eu-2", "client": "internal service", "source_ip": "192.0.2.239", "outcome": "Success", "request_id": "454bc6cd-6af6-404e-a60d-a382a0abe810" } }, { "model": "app.apicall", "pk": 461, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-16T22:01:59Z", "operation": "keys.Decrypt", "region": "us-1", "client": "command line", "source_ip": "192.0.2.88", "outcome": "Success", "request_id": "6524096c-52c8-43a6-9fa8-e0da995cfceb" } }, { "model": "app.apicall", "pk": 462, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-05-07T00:21:29Z", "operation": "billing.GetCostReport", "region": "global", "client": "web console", "source_ip": "198.51.100.73", "outcome": "Success", "request_id": "377da065-a385-4946-bfd4-1841e89889d4" } }, { "model": "app.apicall", "pk": 463, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-06T08:37:21Z", "operation": "identity.CreateUser", "region": "ap-1", "client": "SDK", "source_ip": "198.51.100.134", "outcome": "Success", "request_id": "67584473-42ab-4f58-a263-3457ce5cd342" } }, { "model": "app.apicall", "pk": 464, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-03-30T15:54:20Z", "operation": "storage.PutObject", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.139", "outcome": "Success", "request_id": "0afca476-8bc8-49cb-97de-4b44891ef30c" } }, { "model": "app.apicall", "pk": 465, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-02-27T06:45:42Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.125", "outcome": "Success", "request_id": "f06f0aa5-0278-4ce5-82bd-2fb0832c84b4" } }, { "model": "app.apicall", "pk": 466, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-18T01:47:10Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.61", "outcome": "Success", "request_id": "e84cce6a-c0ff-4e67-ac13-69566b519d4e" } }, { "model": "app.apicall", "pk": 467, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-19T09:42:13Z", "operation": "compute.StartInstance", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.121", "outcome": "Success", "request_id": "533ef874-ba73-4c31-9e85-20079ef3efe6" } }, { "model": "app.apicall", "pk": 468, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-06-02T04:32:15Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "command line", "source_ip": "203.0.113.125", "outcome": "Success", "request_id": "bf1d3034-402e-497e-acb2-ea46e2ab73a0" } }, { "model": "app.apicall", "pk": 469, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-09T05:08:55Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "web console", "source_ip": "198.51.100.184", "outcome": "Success", "request_id": "25f432ed-8b28-4781-b876-e1bf2f364c65" } }, { "model": "app.apicall", "pk": 470, "fields": { "principal": 33, "account_id": 5, "provider": "azure", "event_time": "2026-02-22T23:03:34Z", "operation": "audit.StopLogging", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.118", "outcome": "Success", "request_id": "67d5ced4-23ef-476e-9ee6-32f1a606862f" } }, { "model": "app.apicall", "pk": 471, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-24T23:05:16Z", "operation": "identity.CreateUser", "region": "us-1", "client": "command line", "source_ip": "203.0.113.59", "outcome": "Success", "request_id": "9a8b0174-aed7-44b5-b331-26f24f8c1c5d" } }, { "model": "app.apicall", "pk": 472, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-04-04T17:32:24Z", "operation": "storage.SetBucketPolicy", "region": "us-2", "client": "SDK", "source_ip": "203.0.113.225", "outcome": "Success", "request_id": "a832f77e-d780-456a-ae8f-d05a40fb1204" } }, { "model": "app.apicall", "pk": 473, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-06T05:12:28Z", "operation": "storage.GetObject", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.141", "outcome": "Success", "request_id": "02b3fbce-f1a2-4368-82dc-a8c9ff7c22e0" } }, { "model": "app.apicall", "pk": 474, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-04-03T05:14:40Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.231", "outcome": "AccessDenied", "request_id": "f1638f6f-d59c-44b2-9e87-d4c6e7eee39a" } }, { "model": "app.apicall", "pk": 475, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-06-07T16:47:11Z", "operation": "identity.ListRoles", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.160", "outcome": "Success", "request_id": "f61a202d-ad07-4a94-ab8e-2fc2fab68752" } }, { "model": "app.apicall", "pk": 476, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-10T06:57:27Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.83", "outcome": "Success", "request_id": "7440d53f-09cb-46b4-b186-6383a6074d26" } }, { "model": "app.apicall", "pk": 477, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-04-03T11:32:10Z", "operation": "storage.GetObject", "region": "us-2", "client": "internal service", "source_ip": "198.51.100.248", "outcome": "Success", "request_id": "bbad76bb-96b8-4c70-8291-ab6400d3901f" } }, { "model": "app.apicall", "pk": 478, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-17T01:13:50Z", "operation": "storage.GetObject", "region": "global", "client": "command line", "source_ip": "192.0.2.6", "outcome": "AccessDenied", "request_id": "67fc6664-b373-481f-8048-cddfd493954e" } }, { "model": "app.apicall", "pk": 479, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-02-28T19:51:13Z", "operation": "identity.ListRoles", "region": "global", "client": "SDK", "source_ip": "203.0.113.174", "outcome": "Success", "request_id": "1a36915b-1e27-4f79-9e7f-a9b7af5ea2fd" } }, { "model": "app.apicall", "pk": 480, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-04-02T00:58:26Z", "operation": "compute.DescribeInstances", "region": "us-2", "client": "command line", "source_ip": "203.0.113.130", "outcome": "Success", "request_id": "1c30ff40-8731-42ba-a718-7766453bff52" } }, { "model": "app.apicall", "pk": 481, "fields": { "principal": 45, "account_id": 1, "provider": "aws", "event_time": "2026-02-13T06:15:49Z", "operation": "billing.GetCostReport", "region": "us-2", "client": "infrastructure as code", "source_ip": "192.0.2.102", "outcome": "Success", "request_id": "fd899721-388f-4cdc-a7f7-92559d6f154c" } }, { "model": "app.apicall", "pk": 482, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-20T00:31:41Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "web console", "source_ip": "203.0.113.159", "outcome": "Success", "request_id": "996c85a3-343b-43e0-9d30-b534c3c84990" } }, { "model": "app.apicall", "pk": 483, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-03-06T02:25:41Z", "operation": "keys.Decrypt", "region": "ap-1", "client": "web console", "source_ip": "192.0.2.42", "outcome": "Success", "request_id": "69c768c3-27b3-4653-8a6e-7c2962af5f8b" } }, { "model": "app.apicall", "pk": 484, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-20T16:00:23Z", "operation": "storage.PutObject", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.172", "outcome": "Success", "request_id": "1f28d1ca-4780-4768-9ab4-7963f81f5105" } }, { "model": "app.apicall", "pk": 485, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-04-30T20:25:17Z", "operation": "audit.StopLogging", "region": "global", "client": "infrastructure as code", "source_ip": "203.0.113.233", "outcome": "Success", "request_id": "eec06fd8-8549-40cb-a4b3-3c65435f68f3" } }, { "model": "app.apicall", "pk": 486, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-20T04:51:30Z", "operation": "identity.ListRoles", "region": "ap-1", "client": "command line", "source_ip": "192.0.2.221", "outcome": "Success", "request_id": "a2185c34-290a-4e1a-8455-10f6737c1b03" } }, { "model": "app.apicall", "pk": 487, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-14T15:28:58Z", "operation": "identity.CreateAccessKey", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.104", "outcome": "Success", "request_id": "c471514c-4e89-49ca-aaf7-0a39f22f5d96" } }, { "model": "app.apicall", "pk": 488, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-04-08T20:54:46Z", "operation": "compute.StartInstance", "region": "us-2", "client": "web console", "source_ip": "203.0.113.46", "outcome": "Success", "request_id": "ba0e8b0f-aa76-4a1f-aac6-4bdc4b5a59be" } }, { "model": "app.apicall", "pk": 489, "fields": { "principal": 37, "account_id": 8, "provider": "aws", "event_time": "2026-01-28T16:51:47Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.231", "outcome": "Success", "request_id": "2969b44a-8588-4d4b-b7ba-0502412d5349" } }, { "model": "app.apicall", "pk": 490, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-18T11:19:30Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.153", "outcome": "Success", "request_id": "fae223c5-a1bf-4d2c-aaa5-eddee4c2770f" } }, { "model": "app.apicall", "pk": 491, "fields": { "principal": 26, "account_id": 12, "provider": "azure", "event_time": "2026-02-17T16:14:44Z", "operation": "storage.PutObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.41", "outcome": "AccessDenied", "request_id": "499ab1d9-3e9a-4955-a7a0-7b3c1aa60f69" } }, { "model": "app.apicall", "pk": 492, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-21T15:31:42Z", "operation": "storage.SetBucketPolicy", "region": "global", "client": "web console", "source_ip": "203.0.113.234", "outcome": "Success", "request_id": "141fa3a8-a041-4d5c-b009-9389ced5949f" } }, { "model": "app.apicall", "pk": 493, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-13T06:26:39Z", "operation": "storage.GetObject", "region": "us-2", "client": "command line", "source_ip": "192.0.2.23", "outcome": "Success", "request_id": "8dd1ed79-c771-4802-8272-64524de396c0" } }, { "model": "app.apicall", "pk": 494, "fields": { "principal": 14, "account_id": 10, "provider": "azure", "event_time": "2026-02-19T17:39:04Z", "operation": "storage.ListBuckets", "region": "global", "client": "internal service", "source_ip": "192.0.2.169", "outcome": "Success", "request_id": "b9a351fc-c169-46b1-adcc-5539a50ce291" } }, { "model": "app.apicall", "pk": 495, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-15T10:50:20Z", "operation": "identity.AttachAdminPolicy", "region": "us-1", "client": "command line", "source_ip": "192.0.2.195", "outcome": "Success", "request_id": "618c64ea-1800-4438-b5be-427bdfbe3035" } }, { "model": "app.apicall", "pk": 496, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-23T13:08:11Z", "operation": "keys.ScheduleKeyDeletion", "region": "eu-1", "client": "internal service", "source_ip": "203.0.113.201", "outcome": "Success", "request_id": "c25cc72b-37cc-48ab-9272-c2f85f83e94c" } }, { "model": "app.apicall", "pk": 497, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-04-02T18:55:07Z", "operation": "identity.CreateAccessKey", "region": "eu-2", "client": "infrastructure as code", "source_ip": "198.51.100.115", "outcome": "Success", "request_id": "ca219e6d-d11d-4245-bc44-643eb250918c" } }, { "model": "app.apicall", "pk": 498, "fields": { "principal": 49, "account_id": 9, "provider": "aws", "event_time": "2026-05-28T08:38:32Z", "operation": "storage.GetObject", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.245", "outcome": "Success", "request_id": "afb2b678-318e-42e3-a663-fa11cbdf0f7e" } }, { "model": "app.apicall", "pk": 499, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-28T06:49:54Z", "operation": "storage.GetObject", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.36", "outcome": "Success", "request_id": "2546ccf1-5af8-42e8-9c12-340004da3953" } }, { "model": "app.apicall", "pk": 500, "fields": { "principal": 35, "account_id": 6, "provider": "aws", "event_time": "2026-03-15T14:35:44Z", "operation": "storage.ListBuckets", "region": "us-2", "client": "SDK", "source_ip": "192.0.2.223", "outcome": "Success", "request_id": "4d0875f8-77bd-4be5-bdfc-e96bfb506b02" } }, { "model": "app.apicall", "pk": 501, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-25T15:45:12Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.133", "outcome": "Success", "request_id": "f5ef934a-7fb8-484a-850a-79b64e5ab1da" } }, { "model": "app.apicall", "pk": 502, "fields": { "principal": 3, "account_id": 6, "provider": "aws", "event_time": "2026-05-30T10:28:18Z", "operation": "storage.GetObject", "region": "us-1", "client": "web console", "source_ip": "192.0.2.187", "outcome": "Success", "request_id": "c6cc3eef-b05b-40d9-9931-d02ed5d394ee" } }, { "model": "app.apicall", "pk": 503, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-19T14:06:15Z", "operation": "identity.CreateUser", "region": "us-2", "client": "SDK", "source_ip": "203.0.113.224", "outcome": "Success", "request_id": "426379d4-e344-4e73-8d53-7f539a5995b9" } }, { "model": "app.apicall", "pk": 504, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-19T05:17:30Z", "operation": "storage.GetObject", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.22", "outcome": "Success", "request_id": "e1050346-0142-43cf-918d-04a720858909" } }, { "model": "app.apicall", "pk": 505, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-04-04T18:19:22Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "web console", "source_ip": "192.0.2.97", "outcome": "ValidationError", "request_id": "00cf241d-7746-45c1-aec7-f7331eed733a" } }, { "model": "app.apicall", "pk": 506, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-06-02T13:06:09Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.61", "outcome": "AccessDenied", "request_id": "06e9ee77-139a-4f22-9533-21f8d036b156" } }, { "model": "app.apicall", "pk": 507, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-03-06T08:08:44Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.59", "outcome": "Success", "request_id": "19c6b57b-4c16-471a-8468-b5d8b108e96d" } }, { "model": "app.apicall", "pk": 508, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-21T01:08:55Z", "operation": "keys.Decrypt", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.160", "outcome": "NotFound", "request_id": "cda1cbb2-d1bf-42be-b5ec-ac06dfc5ec9a" } }, { "model": "app.apicall", "pk": 509, "fields": { "principal": 11, "account_id": 3, "provider": "azure", "event_time": "2026-06-10T14:40:09Z", "operation": "storage.GetObject", "region": "eu-2", "client": "internal service", "source_ip": "198.51.100.198", "outcome": "Success", "request_id": "dd48290e-83c0-466c-b3f6-61cd17183701" } }, { "model": "app.apicall", "pk": 510, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-05-08T08:54:07Z", "operation": "audit.StopLogging", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.143", "outcome": "Success", "request_id": "278c8099-79c4-4151-801e-7005b7aaa877" } }, { "model": "app.apicall", "pk": 511, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-04-05T20:39:26Z", "operation": "storage.GetObject", "region": "eu-1", "client": "web console", "source_ip": "198.51.100.30", "outcome": "Success", "request_id": "f5d12348-8d89-4fdb-928a-18a8907a4c56" } }, { "model": "app.apicall", "pk": 512, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-20T17:38:24Z", "operation": "compute.DescribeInstances", "region": "global", "client": "command line", "source_ip": "198.51.100.239", "outcome": "Success", "request_id": "e3d37e17-c55e-4a3f-aa4d-911a558f92bf" } }, { "model": "app.apicall", "pk": 513, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-07T09:49:27Z", "operation": "keys.Decrypt", "region": "us-1", "client": "command line", "source_ip": "192.0.2.115", "outcome": "Success", "request_id": "1bd8147b-01cd-467f-adf7-311e87ecaed9" } }, { "model": "app.apicall", "pk": 514, "fields": { "principal": 59, "account_id": 3, "provider": "azure", "event_time": "2026-05-09T05:46:39Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.187", "outcome": "Success", "request_id": "ddbe43fe-71c3-4d39-a579-a7ae87f1acec" } }, { "model": "app.apicall", "pk": 515, "fields": { "principal": 10, "account_id": 5, "provider": "azure", "event_time": "2026-04-06T11:47:50Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.205", "outcome": "AccessDenied", "request_id": "128e90c8-6dc0-44d1-8e37-57bcb4daa125" } }, { "model": "app.apicall", "pk": 516, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-03-06T22:11:23Z", "operation": "compute.DeleteInstance", "region": "eu-1", "client": "command line", "source_ip": "203.0.113.73", "outcome": "Success", "request_id": "adadc756-45a6-4be4-958b-f0fcc2e36640" } }, { "model": "app.apicall", "pk": 517, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-08T13:40:37Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.189", "outcome": "Success", "request_id": "e6c651eb-2add-4be3-bb69-c8b3a9f9d922" } }, { "model": "app.apicall", "pk": 518, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-21T17:57:29Z", "operation": "keys.Decrypt", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.94", "outcome": "Throttled", "request_id": "1e525386-e9dd-4056-87bf-60a30cd1eb9f" } }, { "model": "app.apicall", "pk": 519, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-02-02T22:15:32Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.41", "outcome": "Success", "request_id": "ec30dc86-1e90-499d-9ee3-60f8e61fedd1" } }, { "model": "app.apicall", "pk": 520, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-04-03T15:55:01Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "command line", "source_ip": "192.0.2.160", "outcome": "Success", "request_id": "a171c756-faf1-4a42-b89c-2142ebb1e7e4" } }, { "model": "app.apicall", "pk": 521, "fields": { "principal": 5, "account_id": 4, "provider": "aws", "event_time": "2026-04-27T08:49:05Z", "operation": "storage.GetObject", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.45", "outcome": "AccessDenied", "request_id": "334834aa-eac5-490c-8cb1-e80cd4ae543a" } }, { "model": "app.apicall", "pk": 522, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-06-04T05:15:29Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "web console", "source_ip": "203.0.113.166", "outcome": "Throttled", "request_id": "9b428637-659b-456f-8187-beedfd4bf918" } }, { "model": "app.apicall", "pk": 523, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-09T02:30:05Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "SDK", "source_ip": "192.0.2.194", "outcome": "Success", "request_id": "e881273b-1c19-4b3f-92a8-687e2f94be68" } }, { "model": "app.apicall", "pk": 524, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-22T07:55:45Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "infrastructure as code", "source_ip": "192.0.2.72", "outcome": "Success", "request_id": "a079d16d-5e05-4fc1-8d5a-e3b18ef60406" } }, { "model": "app.apicall", "pk": 525, "fields": { "principal": 48, "account_id": 6, "provider": "aws", "event_time": "2026-01-28T07:25:45Z", "operation": "storage.GetObject", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.32", "outcome": "Success", "request_id": "90294918-890f-4b9a-ba15-7bdd0e8c1742" } }, { "model": "app.apicall", "pk": 526, "fields": { "principal": 51, "account_id": 5, "provider": "azure", "event_time": "2026-05-01T12:44:10Z", "operation": "identity.AttachAdminPolicy", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.150", "outcome": "Success", "request_id": "db10a77b-596f-4cf4-a19f-39ded3bffa32" } }, { "model": "app.apicall", "pk": 527, "fields": { "principal": 4, "account_id": 1, "provider": "aws", "event_time": "2026-02-22T15:19:59Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "web console", "source_ip": "203.0.113.165", "outcome": "Success", "request_id": "c11daf80-a5db-4520-8896-22fbc8fd5db3" } }, { "model": "app.apicall", "pk": 528, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-06-08T23:18:45Z", "operation": "storage.PutObject", "region": "global", "client": "infrastructure as code", "source_ip": "192.0.2.230", "outcome": "Success", "request_id": "41bf277c-9558-4247-baa6-e0cd12ac459e" } }, { "model": "app.apicall", "pk": 529, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-08T21:09:47Z", "operation": "identity.CreateAccessKey", "region": "global", "client": "SDK", "source_ip": "192.0.2.50", "outcome": "Success", "request_id": "a151ebb0-ddd9-43a0-94a2-1c48e21606f3" } }, { "model": "app.apicall", "pk": 530, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-10T02:22:39Z", "operation": "storage.PutObject", "region": "us-1", "client": "SDK", "source_ip": "203.0.113.220", "outcome": "Success", "request_id": "3d53da6a-35ed-4fa6-8afb-d55d6dafa289" } }, { "model": "app.apicall", "pk": 531, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-10T17:02:36Z", "operation": "storage.PutObject", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.25", "outcome": "Success", "request_id": "5d5f6b4f-358a-48c7-9767-11967003b267" } }, { "model": "app.apicall", "pk": 532, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-10T12:52:17Z", "operation": "storage.PutObject", "region": "eu-2", "client": "web console", "source_ip": "192.0.2.66", "outcome": "Success", "request_id": "930f5c98-4e7a-44dc-857d-2ef18f269a44" } }, { "model": "app.apicall", "pk": 533, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-03-02T07:01:31Z", "operation": "storage.ListBuckets", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.18", "outcome": "AccessDenied", "request_id": "77c24b0d-1543-4f20-b66b-c6270a060c80" } }, { "model": "app.apicall", "pk": 534, "fields": { "principal": 48, "account_id": 6, "provider": "aws", "event_time": "2026-01-30T01:30:00Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "infrastructure as code", "source_ip": "198.51.100.127", "outcome": "Success", "request_id": "edb929e5-ae74-4415-abfa-010dd3281c0d" } }, { "model": "app.apicall", "pk": 535, "fields": { "principal": 9, "account_id": 2, "provider": "azure", "event_time": "2026-04-09T10:30:12Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "command line", "source_ip": "198.51.100.88", "outcome": "Success", "request_id": "3a7b4865-160f-41cb-be42-533837c4bb0c" } }, { "model": "app.apicall", "pk": 536, "fields": { "principal": 41, "account_id": 8, "provider": "aws", "event_time": "2026-06-09T08:30:24Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "internal service", "source_ip": "198.51.100.245", "outcome": "Success", "request_id": "c5c4b17e-b092-4ab5-a707-1805b05bd825" } }, { "model": "app.apicall", "pk": 537, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-10T20:55:19Z", "operation": "keys.ScheduleKeyDeletion", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.82", "outcome": "Success", "request_id": "d7998c87-14ea-4eca-8d93-6b0bfaac6988" } }, { "model": "app.apicall", "pk": 538, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-16T10:40:36Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.19", "outcome": "ValidationError", "request_id": "415b7437-0b9e-439b-b295-02e1df4a39ce" } }, { "model": "app.apicall", "pk": 539, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-15T04:13:16Z", "operation": "identity.CreateAccessKey", "region": "global", "client": "web console", "source_ip": "198.51.100.80", "outcome": "Success", "request_id": "43b68f93-460b-485a-8cf9-658650215fb2" } }, { "model": "app.apicall", "pk": 540, "fields": { "principal": 40, "account_id": 5, "provider": "azure", "event_time": "2026-03-27T00:51:50Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.237", "outcome": "Success", "request_id": "a2d338b5-5d80-44a0-ac4c-7c049111cb7b" } }, { "model": "app.apicall", "pk": 541, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-16T08:35:56Z", "operation": "keys.Decrypt", "region": "us-1", "client": "command line", "source_ip": "203.0.113.76", "outcome": "Success", "request_id": "11b2362e-5cd7-4531-8142-1bb58a943559" } }, { "model": "app.apicall", "pk": 542, "fields": { "principal": 18, "account_id": 3, "provider": "azure", "event_time": "2026-05-19T16:13:36Z", "operation": "storage.GetObject", "region": "eu-2", "client": "SDK", "source_ip": "198.51.100.112", "outcome": "Success", "request_id": "449cf691-4993-45b6-9efd-4049d3c06f28" } }, { "model": "app.apicall", "pk": 543, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-17T15:18:02Z", "operation": "billing.GetCostReport", "region": "ap-1", "client": "SDK", "source_ip": "198.51.100.242", "outcome": "Success", "request_id": "1928eaee-8f91-4d3d-b6c1-5fca545d719b" } }, { "model": "app.apicall", "pk": 544, "fields": { "principal": 56, "account_id": 10, "provider": "azure", "event_time": "2026-04-07T03:41:42Z", "operation": "storage.GetObject", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.54", "outcome": "Success", "request_id": "6bf6d65d-c5eb-44b2-82cf-124253238699" } }, { "model": "app.apicall", "pk": 545, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-18T02:47:01Z", "operation": "compute.DescribeInstances", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.213", "outcome": "Success", "request_id": "f34f8941-2db8-47a7-93c5-7bd41c4ae528" } }, { "model": "app.apicall", "pk": 546, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-24T21:23:47Z", "operation": "storage.ListBuckets", "region": "us-2", "client": "SDK", "source_ip": "198.51.100.106", "outcome": "Success", "request_id": "e608f3bd-5904-4b2f-aeb7-abf4eadb66d9" } }, { "model": "app.apicall", "pk": 547, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-27T10:33:10Z", "operation": "keys.Decrypt", "region": "global", "client": "SDK", "source_ip": "198.51.100.248", "outcome": "Success", "request_id": "0854587d-d245-4bc7-bb3a-4b9957246c94" } }, { "model": "app.apicall", "pk": 548, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-11T04:46:58Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "command line", "source_ip": "203.0.113.127", "outcome": "Success", "request_id": "c1a0c618-e7df-42cf-a400-21ed0af886c6" } }, { "model": "app.apicall", "pk": 549, "fields": { "principal": 16, "account_id": 10, "provider": "azure", "event_time": "2026-04-20T11:52:01Z", "operation": "storage.PutObject", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.182", "outcome": "Success", "request_id": "9fe79b72-a704-4e7c-b598-21d2efef20ae" } }, { "model": "app.apicall", "pk": 550, "fields": { "principal": 1, "account_id": 4, "provider": "aws", "event_time": "2026-05-13T01:24:40Z", "operation": "audit.StopLogging", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.122", "outcome": "Success", "request_id": "7a3bc5b7-0cfb-4d61-8c4b-c54c96f5acfa" } }, { "model": "app.apicall", "pk": 551, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-23T13:28:46Z", "operation": "storage.PutObject", "region": "us-1", "client": "command line", "source_ip": "198.51.100.244", "outcome": "Success", "request_id": "e7d21f9e-9437-4fb7-8b1c-2cfaa65d7977" } }, { "model": "app.apicall", "pk": 552, "fields": { "principal": 55, "account_id": 6, "provider": "aws", "event_time": "2026-04-27T07:13:46Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "SDK", "source_ip": "198.51.100.121", "outcome": "Success", "request_id": "35553e7f-8099-49d0-8c6f-b953027400a9" } }, { "model": "app.apicall", "pk": 553, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-06-04T21:45:19Z", "operation": "storage.ListBuckets", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.154", "outcome": "Success", "request_id": "cb9df1c6-9ae9-4dd0-8bfd-441cd189b134" } }, { "model": "app.apicall", "pk": 554, "fields": { "principal": 35, "account_id": 6, "provider": "aws", "event_time": "2026-03-16T15:44:07Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.43", "outcome": "AccessDenied", "request_id": "b9e340b0-f050-4761-bc75-009b4fde7adb" } }, { "model": "app.apicall", "pk": 555, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-18T03:53:52Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "internal service", "source_ip": "198.51.100.4", "outcome": "Success", "request_id": "2eebc138-eae5-4afe-b5d9-63c0b36e88b1" } }, { "model": "app.apicall", "pk": 556, "fields": { "principal": 61, "account_id": 8, "provider": "aws", "event_time": "2026-04-05T01:46:56Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "infrastructure as code", "source_ip": "198.51.100.87", "outcome": "Success", "request_id": "cf62cd3c-f9b1-4a41-8b09-3742030b64ae" } }, { "model": "app.apicall", "pk": 557, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-26T05:37:06Z", "operation": "network.OpenIngressRule", "region": "global", "client": "internal service", "source_ip": "198.51.100.63", "outcome": "Success", "request_id": "d7e80ca2-123e-4982-9212-3d047cfc2c9d" } }, { "model": "app.apicall", "pk": 558, "fields": { "principal": 35, "account_id": 6, "provider": "aws", "event_time": "2026-03-18T11:15:56Z", "operation": "identity.ListRoles", "region": "global", "client": "infrastructure as code", "source_ip": "203.0.113.156", "outcome": "Success", "request_id": "e8c5f2fb-350f-490d-9117-b59867107d7f" } }, { "model": "app.apicall", "pk": 559, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-21T01:46:26Z", "operation": "storage.PutObject", "region": "global", "client": "web console", "source_ip": "198.51.100.32", "outcome": "Success", "request_id": "b5e294b0-c59a-4a47-a47d-de17ceb11559" } }, { "model": "app.apicall", "pk": 560, "fields": { "principal": 20, "account_id": 5, "provider": "azure", "event_time": "2026-05-03T18:32:21Z", "operation": "billing.GetCostReport", "region": "global", "client": "web console", "source_ip": "192.0.2.98", "outcome": "Success", "request_id": "231d0472-2b90-4b39-b12d-ab2ba5d48a77" } }, { "model": "app.apicall", "pk": 561, "fields": { "principal": 26, "account_id": 12, "provider": "azure", "event_time": "2026-02-19T12:34:01Z", "operation": "compute.StartInstance", "region": "us-1", "client": "web console", "source_ip": "192.0.2.248", "outcome": "Success", "request_id": "03a323ac-e6ac-400d-93f8-1d1dbe4262a0" } }, { "model": "app.apicall", "pk": 562, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-29T00:10:36Z", "operation": "storage.PutObject", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.192", "outcome": "Success", "request_id": "2bf33b12-5648-450f-93db-339f4f232ecb" } }, { "model": "app.apicall", "pk": 563, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-03-29T20:43:18Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "infrastructure as code", "source_ip": "198.51.100.39", "outcome": "Success", "request_id": "eb43cd44-9617-4ceb-be31-05fc9e0a11eb" } }, { "model": "app.apicall", "pk": 564, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-04-07T00:08:50Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "internal service", "source_ip": "203.0.113.10", "outcome": "AccessDenied", "request_id": "0d26af08-94db-46c8-b6e2-19693b1bae14" } }, { "model": "app.apicall", "pk": 565, "fields": { "principal": 34, "account_id": 6, "provider": "aws", "event_time": "2026-04-12T02:01:32Z", "operation": "storage.GetObject", "region": "eu-2", "client": "SDK", "source_ip": "203.0.113.166", "outcome": "Success", "request_id": "866da6ba-0272-4f02-9c41-c552bebbbab1" } }, { "model": "app.apicall", "pk": 566, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-27T20:31:22Z", "operation": "storage.GetObject", "region": "ap-1", "client": "internal service", "source_ip": "203.0.113.147", "outcome": "Success", "request_id": "754c8aa6-9572-4f0e-9a54-0d9b93cb03e7" } }, { "model": "app.apicall", "pk": 567, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-19T19:24:32Z", "operation": "compute.StartInstance", "region": "ap-1", "client": "SDK", "source_ip": "192.0.2.218", "outcome": "AccessDenied", "request_id": "19a8a3d5-4cd0-436c-9f9e-0a3721aa2c82" } }, { "model": "app.apicall", "pk": 568, "fields": { "principal": 24, "account_id": 12, "provider": "azure", "event_time": "2026-03-21T19:32:41Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "command line", "source_ip": "203.0.113.249", "outcome": "NotFound", "request_id": "8dc98e33-635a-493f-93d5-464d152662c6" } }, { "model": "app.apicall", "pk": 569, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-02-10T21:52:54Z", "operation": "storage.GetObject", "region": "us-1", "client": "command line", "source_ip": "198.51.100.16", "outcome": "Success", "request_id": "fbdc5bd7-065f-4ebd-a760-6406c1ea5083" } }, { "model": "app.apicall", "pk": 570, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-27T05:48:57Z", "operation": "audit.StopLogging", "region": "global", "client": "command line", "source_ip": "192.0.2.92", "outcome": "Success", "request_id": "c15718c4-6cba-4ec1-8527-23e241679e4a" } }, { "model": "app.apicall", "pk": 571, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-18T19:42:06Z", "operation": "compute.DescribeInstances", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.6", "outcome": "Success", "request_id": "ff37633a-a3dc-4d44-ab56-bbc266f3c320" } }, { "model": "app.apicall", "pk": 572, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-02-04T11:23:29Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "web console", "source_ip": "198.51.100.130", "outcome": "Success", "request_id": "a94fa8ec-3e26-41b4-9517-278e4d494332" } }, { "model": "app.apicall", "pk": 573, "fields": { "principal": 28, "account_id": 12, "provider": "azure", "event_time": "2026-03-03T15:18:07Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "command line", "source_ip": "192.0.2.241", "outcome": "Success", "request_id": "4493b4cc-a012-4fa7-b330-c68b03528d55" } }, { "model": "app.apicall", "pk": 574, "fields": { "principal": 23, "account_id": 2, "provider": "azure", "event_time": "2026-03-21T18:29:57Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "infrastructure as code", "source_ip": "192.0.2.58", "outcome": "Success", "request_id": "6d2dd6df-fa61-47a0-b4c0-004a83c1ef0a" } }, { "model": "app.apicall", "pk": 575, "fields": { "principal": 49, "account_id": 9, "provider": "aws", "event_time": "2026-05-29T11:29:08Z", "operation": "storage.GetObject", "region": "us-2", "client": "web console", "source_ip": "192.0.2.29", "outcome": "Success", "request_id": "18f80af4-7757-4385-8615-e52f5e470c64" } }, { "model": "app.apicall", "pk": 576, "fields": { "principal": 46, "account_id": 2, "provider": "azure", "event_time": "2026-06-10T16:06:43Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "internal service", "source_ip": "203.0.113.63", "outcome": "ValidationError", "request_id": "a4649688-bd8d-476e-889e-3ca33350bac0" } }, { "model": "app.apicall", "pk": 577, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-20T22:06:28Z", "operation": "storage.SetBucketPolicy", "region": "global", "client": "command line", "source_ip": "192.0.2.64", "outcome": "Success", "request_id": "e91a5890-3b27-4be1-a086-0fd9bee1f82d" } }, { "model": "app.apicall", "pk": 578, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-22T19:05:56Z", "operation": "storage.GetObject", "region": "us-2", "client": "SDK", "source_ip": "203.0.113.32", "outcome": "AccessDenied", "request_id": "0aa9a6b2-c6dc-4f0c-adba-5fb75df481cb" } }, { "model": "app.apicall", "pk": 579, "fields": { "principal": 2, "account_id": 9, "provider": "aws", "event_time": "2026-03-10T17:04:28Z", "operation": "storage.PutObject", "region": "eu-2", "client": "command line", "source_ip": "203.0.113.29", "outcome": "Success", "request_id": "da9cf3ca-e327-44f3-91c4-38cae3587bc1" } }, { "model": "app.apicall", "pk": 580, "fields": { "principal": 30, "account_id": 2, "provider": "azure", "event_time": "2026-06-07T07:44:23Z", "operation": "billing.GetCostReport", "region": "us-2", "client": "web console", "source_ip": "203.0.113.181", "outcome": "Success", "request_id": "3efea2ac-16a6-4b0d-ae0a-23cfe5b2b08f" } }, { "model": "app.apicall", "pk": 581, "fields": { "principal": 54, "account_id": 3, "provider": "azure", "event_time": "2026-03-10T17:08:20Z", "operation": "compute.DescribeInstances", "region": "ap-1", "client": "internal service", "source_ip": "203.0.113.30", "outcome": "AccessDenied", "request_id": "ee5285f5-af6a-46d9-ae3b-599e3efd0cc5" } }, { "model": "app.apicall", "pk": 582, "fields": { "principal": 15, "account_id": 7, "provider": "aws", "event_time": "2026-04-07T18:53:36Z", "operation": "storage.GetObject", "region": "us-2", "client": "command line", "source_ip": "203.0.113.107", "outcome": "Success", "request_id": "10fdad6c-58d3-4d35-a282-8c802ae467dc" } }, { "model": "app.apicall", "pk": 583, "fields": { "principal": 47, "account_id": 2, "provider": "azure", "event_time": "2026-04-09T01:44:13Z", "operation": "identity.ListRoles", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.235", "outcome": "Success", "request_id": "437ba61a-4463-4817-94cc-4ecba2375e5c" } }, { "model": "app.apicall", "pk": 584, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-29T15:55:56Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "web console", "source_ip": "203.0.113.66", "outcome": "Success", "request_id": "b7ee69e9-62c1-49a5-9ecd-3513840cb7cf" } }, { "model": "app.apicall", "pk": 585, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-22T13:41:34Z", "operation": "storage.ListBuckets", "region": "ap-1", "client": "command line", "source_ip": "198.51.100.228", "outcome": "Success", "request_id": "829e2420-5e81-43c9-ab2c-2928489633c7" } }, { "model": "app.apicall", "pk": 586, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-02-05T16:03:57Z", "operation": "keys.Decrypt", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.213", "outcome": "Success", "request_id": "d6abc317-55ea-45f7-89e7-297130df47c2" } }, { "model": "app.apicall", "pk": 587, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-23T01:24:22Z", "operation": "billing.GetCostReport", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.231", "outcome": "Success", "request_id": "4b9b14cd-31ad-4f8f-90c1-44d1b43f1b56" } }, { "model": "app.apicall", "pk": 588, "fields": { "principal": 5, "account_id": 4, "provider": "aws", "event_time": "2026-04-27T20:26:33Z", "operation": "storage.ListBuckets", "region": "global", "client": "internal service", "source_ip": "203.0.113.179", "outcome": "Success", "request_id": "d92c08ba-8263-4ebf-a94f-3d2093629c38" } }, { "model": "app.apicall", "pk": 589, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-23T22:14:48Z", "operation": "storage.GetObject", "region": "ap-1", "client": "command line", "source_ip": "203.0.113.69", "outcome": "Success", "request_id": "19f12ca9-1780-4d8a-86d2-b556ef91c870" } }, { "model": "app.apicall", "pk": 590, "fields": { "principal": 25, "account_id": 1, "provider": "aws", "event_time": "2026-03-09T16:07:12Z", "operation": "compute.DescribeInstances", "region": "global", "client": "internal service", "source_ip": "192.0.2.153", "outcome": "Success", "request_id": "b8e55473-aa70-4d8d-92ba-10b2aa8082c4" } }, { "model": "app.apicall", "pk": 591, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-04-30T01:20:45Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "SDK", "source_ip": "203.0.113.88", "outcome": "Success", "request_id": "41fe6265-b8ce-4bf8-8374-075c84d0d401" } }, { "model": "app.apicall", "pk": 592, "fields": { "principal": 19, "account_id": 5, "provider": "azure", "event_time": "2026-02-23T16:10:02Z", "operation": "identity.ListRoles", "region": "eu-1", "client": "web console", "source_ip": "198.51.100.131", "outcome": "Success", "request_id": "fbf03f8f-5e19-40d4-9e03-8e929f38b360" } }, { "model": "app.apicall", "pk": 593, "fields": { "principal": 29, "account_id": 5, "provider": "azure", "event_time": "2026-03-26T17:33:51Z", "operation": "storage.PutObject", "region": "ap-1", "client": "SDK", "source_ip": "203.0.113.114", "outcome": "ValidationError", "request_id": "1e33083d-eab6-480f-9232-9411d5673735" } }, { "model": "app.apicall", "pk": 594, "fields": { "principal": 38, "account_id": 1, "provider": "aws", "event_time": "2026-05-01T12:17:03Z", "operation": "billing.GetCostReport", "region": "global", "client": "internal service", "source_ip": "203.0.113.184", "outcome": "Success", "request_id": "15a30a6e-4b8f-46e9-8efc-c9810f47d4f8" } }, { "model": "app.apicall", "pk": 595, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-02-06T03:19:51Z", "operation": "identity.ListRoles", "region": "global", "client": "command line", "source_ip": "192.0.2.238", "outcome": "Success", "request_id": "75a1d529-a5d9-43b1-bdbd-6f00a0b6414c" } }, { "model": "app.apicall", "pk": 596, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-02-07T22:15:51Z", "operation": "identity.ListRoles", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.210", "outcome": "Success", "request_id": "57fe4876-e1c5-4f53-b3c5-0184c0600852" } }, { "model": "app.apicall", "pk": 597, "fields": { "principal": 39, "account_id": 1, "provider": "aws", "event_time": "2026-02-11T03:57:00Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "web console", "source_ip": "203.0.113.228", "outcome": "Success", "request_id": "e88112e4-741b-4784-bf0b-ea90b018c8ce" } }, { "model": "app.apicall", "pk": 598, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-20T14:24:43Z", "operation": "billing.GetCostReport", "region": "eu-2", "client": "web console", "source_ip": "203.0.113.247", "outcome": "Success", "request_id": "851531ba-0a6d-43e0-812a-59860ca38dc5" } }, { "model": "app.apicall", "pk": 599, "fields": { "principal": 49, "account_id": 9, "provider": "aws", "event_time": "2026-05-29T22:05:38Z", "operation": "audit.StopLogging", "region": "global", "client": "infrastructure as code", "source_ip": "198.51.100.250", "outcome": "Success", "request_id": "199fc52e-9ee0-4230-9253-d0e8128392b7" } }, { "model": "app.apicall", "pk": 600, "fields": { "principal": 7, "account_id": 7, "provider": "aws", "event_time": "2026-03-17T18:27:16Z", "operation": "audit.StopLogging", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.146", "outcome": "Success", "request_id": "63c52eee-9059-45a2-b1af-63ac0e3f784d" } }, { "model": "app.apicall", "pk": 601, "fields": { "principal": 33, "account_id": 5, "provider": "azure", "event_time": "2026-02-24T17:06:06Z", "operation": "storage.ListBuckets", "region": "us-2", "client": "internal service", "source_ip": "192.0.2.147", "outcome": "Success", "request_id": "b5b6100e-9cce-4c93-a3fb-c7d93febbce1" } }, { "model": "app.apicall", "pk": 602, "fields": { "principal": 31, "account_id": 2, "provider": "azure", "event_time": "2026-04-23T00:02:15Z", "operation": "storage.GetObject", "region": "global", "client": "command line", "source_ip": "203.0.113.162", "outcome": "Success", "request_id": "9bf5fddb-243f-4e97-8b74-340a5bf9834f" } }, { "model": "app.apicall", "pk": 603, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-24T22:25:04Z", "operation": "keys.Decrypt", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.112", "outcome": "Success", "request_id": "b9a2a856-8854-458c-8b4a-c7af48679849" } }, { "model": "app.apicall", "pk": 604, "fields": { "principal": 52, "account_id": 11, "provider": "aws", "event_time": "2026-02-21T03:42:02Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "internal service", "source_ip": "192.0.2.210", "outcome": "Success", "request_id": "d584b651-4e32-49a3-aa27-04ea4b770b76" } }, { "model": "app.apicall", "pk": 605, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-04-01T20:51:57Z", "operation": "storage.ListBuckets", "region": "eu-2", "client": "infrastructure as code", "source_ip": "203.0.113.193", "outcome": "Success", "request_id": "499c2ac5-20d0-4d7a-937f-fdf3a8512a17" } }, { "model": "app.apicall", "pk": 606, "fields": { "principal": 27, "account_id": 5, "provider": "azure", "event_time": "2026-04-27T06:59:04Z", "operation": "identity.CreateAccessKey", "region": "us-1", "client": "SDK", "source_ip": "198.51.100.31", "outcome": "Success", "request_id": "33bc8933-ac3c-4b74-a513-1b3dca321240" } }, { "model": "app.apicall", "pk": 607, "fields": { "principal": 57, "account_id": 3, "provider": "azure", "event_time": "2026-05-24T00:11:37Z", "operation": "compute.DescribeInstances", "region": "eu-1", "client": "infrastructure as code", "source_ip": "203.0.113.41", "outcome": "Success", "request_id": "b9d6f5d8-d248-4dc2-9ac3-03456679d32b" } }, { "model": "app.apicall", "pk": 608, "fields": { "principal": 54, "account_id": 3, "provider": "azure", "event_time": "2026-03-11T17:59:13Z", "operation": "compute.DescribeInstances", "region": "us-1", "client": "infrastructure as code", "source_ip": "203.0.113.135", "outcome": "Success", "request_id": "9bd7128c-3a58-403f-b97f-95a0f8531a5c" } }, { "model": "app.apicall", "pk": 609, "fields": { "principal": 12, "account_id": 8, "provider": "aws", "event_time": "2026-03-25T17:35:56Z", "operation": "billing.GetCostReport", "region": "eu-1", "client": "web console", "source_ip": "192.0.2.71", "outcome": "Success", "request_id": "305f57ff-9ec5-4501-b0cd-a6af3822f77c" } }, { "model": "app.apicall", "pk": 610, "fields": { "principal": 44, "account_id": 11, "provider": "aws", "event_time": "2026-02-11T17:01:29Z", "operation": "identity.ListRoles", "region": "global", "client": "SDK", "source_ip": "203.0.113.120", "outcome": "AccessDenied", "request_id": "b33cfdac-42e5-411e-83d8-f7e7d5510898" } }, { "model": "app.apicall", "pk": 611, "fields": { "principal": 50, "account_id": 9, "provider": "aws", "event_time": "2026-01-09T04:29:57Z", "operation": "storage.GetObject", "region": "eu-2", "client": "internal service", "source_ip": "192.0.2.131", "outcome": "Success", "request_id": "dce07590-8cfa-4a35-8eed-43f7ba20d602" } }, { "model": "app.apicall", "pk": 612, "fields": { "principal": 4, "account_id": 1, "provider": "aws", "event_time": "2026-02-23T01:09:34Z", "operation": "keys.Decrypt", "region": "us-1", "client": "SDK", "source_ip": "192.0.2.135", "outcome": "Success", "request_id": "57e7b615-baf4-4e2c-b302-0abea8745a03" } }, { "model": "app.apicall", "pk": 613, "fields": { "principal": 36, "account_id": 3, "provider": "azure", "event_time": "2026-02-08T14:40:33Z", "operation": "compute.DescribeInstances", "region": "eu-2", "client": "command line", "source_ip": "198.51.100.245", "outcome": "Throttled", "request_id": "a22c8b56-aad3-41fa-a314-facaed5b99ea" } }, { "model": "app.apicall", "pk": 614, "fields": { "principal": 13, "account_id": 10, "provider": "azure", "event_time": "2026-03-24T16:29:44Z", "operation": "audit.DeleteTrail", "region": "ap-1", "client": "command line", "source_ip": "198.51.100.105", "outcome": "Success", "request_id": "4817190c-8ede-4958-8507-a1c3985a6494" } }, { "model": "app.apicall", "pk": 615, "fields": { "principal": 16, "account_id": 10, "provider": "azure", "event_time": "2026-04-20T23:24:01Z", "operation": "keys.Decrypt", "region": "us-1", "client": "command line", "source_ip": "203.0.113.18", "outcome": "Throttled", "request_id": "cf7c25a4-69ea-4c14-8f61-dc67596aaf60" } }, { "model": "app.apicall", "pk": 616, "fields": { "principal": 43, "account_id": 4, "provider": "aws", "event_time": "2026-04-04T18:34:12Z", "operation": "storage.GetObject", "region": "eu-1", "client": "command line", "source_ip": "198.51.100.120", "outcome": "Success", "request_id": "7aa11013-fa90-4418-a911-8f17af1fa351" } } ]