From eed4fe04d5b893134724fd59e4d8080351173ba3 Mon Sep 17 00:00:00 2001 From: "heyibrahimkhan@gmail.com" Date: Fri, 13 Nov 2020 05:59:55 +0500 Subject: [PATCH] added role name field to ecs-cloudtrail. --- tools/config/ecs-cloudtrail.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/config/ecs-cloudtrail.yml b/tools/config/ecs-cloudtrail.yml index 5a1368635..597453157 100644 --- a/tools/config/ecs-cloudtrail.yml +++ b/tools/config/ecs-cloudtrail.yml @@ -40,6 +40,7 @@ fieldmappings: userIdentity.principalId: user.id userIdentity.sessionContext.attributes.creationDate: aws.cloudtrail.user_identity.session_context.creation_date userIdentity.sessionContext.attributes.mfaAuthenticated: aws.cloudtrail.user_identity.session_context.mfa_authenticated + userIdentity.sessionContext.sessionIssuer.userName: role.name userIdentity.type: aws.cloudtrail.user_identity.type userIdentity.userName: user.name vpcEndpointId: aws.cloudtrail.vpc_endpoint_id