How can I get resources referenced in an event in cloudTrailEvent?

athena just use cloudtrail log stored s3. the problem is that the cloudtrail event not contain the resources referenced. even though i use Athena， i couldn't get the lifecycle event of specific resource. the LookupEvents API respone has resources field that contain resouces referenced.

Have you looked at the resources ARRAY returned in the Athena query?

Yes， I did. However, there is not found any event with field resources.

I read the cloudtrail event reference record contents . it's seems that just some event with resources field.

For example logs with the resources field, see AWS STS API Event in CloudTrail Log File in the IAM User Guide or Logging AWS KMS API Calls in the AWS Key Management Service Developer Guide.