1 Answer
- Newest
- Most votes
- Most comments
0
Hello.
I think that an event called "PutApprovalResult" is recorded in CloudTrail.
I checked my AWS account and the following event was recorded.
I think you can identify who approved it from this event history.
{
"eventVersion": "1.08",
"userIdentity": {
"type": "IAMUser",
"principalId": "yyyyyyyyyyyyyyy",
"arn": "arn:aws:iam::123456789012:user/test",
"accountId": "123456789012",
"accessKeyId": "yyyyyyyyyyyyyy",
"userName": "test",
"sessionContext": {
"sessionIssuer": {},
"webIdFederationData": {},
"attributes": {
"creationDate": "2025-01-10T04:28:48Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2025-01-10T04:34:09Z",
"eventSource": "codepipeline.amazonaws.com",
"eventName": "PutApprovalResult",
"awsRegion": "ap-northeast-1",
"sourceIPAddress": "10.10.10.10",
"userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0",
"requestParameters": {
"pipelineName": "test-codepipeline",
"stageName": "Approval",
"actionName": "Approval",
"result": {
"summary": "",
"status": "Approved"
},
"token": "11111111-1111-1111-1111-1111111111"
},
"responseElements": {
"approvedAt": "Jan 10, 2025 4:34:09 AM"
},
"requestID": "11111111-1111-1111-1111-1111111111",
"eventID": "11111111-1111-1111-1111-1111111111",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "codepipeline.ap-northeast-1.amazonaws.com"
},
"sessionCredentialFromConsole": "true"
}
Relevant content
asked 3 years ago
- AWS OFFICIALUpdated 2 years ago
