CloudTrail lists users I don't understand

0

My CloudTrail logs list many user names that have this format: i-07c83123218faa22fe

I've no idea what this means or what it references. Can anyone suggest where I look? Or where I might read up on things?

Much appreciated.

已提問 1 年前檢視次數 499 次
1 個回答
0
已接受的答案

Hi, Cloud trail logs any/all AWS API calls - these could be from a 'real' end user - for example you yourself doing something in the console. It can also be from services though - for example an Amazon EC2 machine could be calling an API to do 'something'. When an EC2 machine does something cloudtrail logs the username as the instance name - so you can track it back. That same concept is true of lots of other services - you'll most likely see more entries from services than from real users.

There is some more information here that goes in to more detail: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-user-identity.html

If you look up the name you see in the logs in the EC2 screen you will find the machine it's coming from.

AWS
已回答 1 年前
profile pictureAWS
專家
已審閱 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南