Understanding DynamoDB log file entries
A trail is a configuration that enables delivery of events as log files to an Amazon S3 bucket that you specify. CloudTrail log files contain one or more log entries. An event represents a single request from any source and includes information about the requested action, the date and time of the action, request parameters, and so on.
Every event or log entry contains information about who generated the request. The identity information helps you determine the following:
-
Whether the request was made with root or user credentials.
-
Whether the request was made with temporary security credentials for a role or federated user.
-
Whether the request was made by another Amazon service.
Note
Non key attribute values will be redacted in the CloudTrail logs of actions using the PartiQL API, and will not appear in logs of actions using the classic API.
For more information, see the CloudTrail userIdentity element.
The following examples demonstrate CloudTrail logs of these event types:
Amazon DynamoDB
DynamoDB Streams
UpdateTable
{ "Records": [ { "eventVersion": "1.03", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2015-05-28T18:06:01Z" }, "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" } } }, "eventTime": "2015-05-04T02:14:52Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "UpdateTable", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "console.aws.amazon.com", "requestParameters": { "provisionedThroughput": { "writeCapacityUnits": 25, "readCapacityUnits": 25 } }, "responseElements": { "tableDescription": { "tableName": "Music", "attributeDefinitions": [ { "attributeType": "S", "attributeName": "Artist" }, { "attributeType": "S", "attributeName": "SongTitle" } ], "itemCount": 0, "provisionedThroughput": { "writeCapacityUnits": 10, "numberOfDecreasesToday": 0, "readCapacityUnits": 10, "lastIncreaseDateTime": "May 3, 2015 11:34:14 PM" }, "creationDateTime": "May 3, 2015 11:34:14 PM", "keySchema": [ { "attributeName": "Artist", "keyType": "HASH" }, { "attributeName": "SongTitle", "keyType": "RANGE" } ], "tableStatus": "UPDATING", "tableSizeBytes": 0 } }, "requestID": "AALNP0J2L244N5O15PKISJ1KUFVV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "eb834e01-f168-435f-92c0-c36278378b6e", "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "recipientAccountId": "111122223333" } ] }
DeleteTable
{ "Records": [ { "eventVersion": "1.03", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2015-05-28T18:06:01Z" }, "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" } } }, "eventTime": "2015-05-04T13:38:20Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "DeleteTable", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "console.aws.amazon.com", "requestParameters": { "tableName": "Music" }, "responseElements": { "tableDescription": { "tableName": "Music", "itemCount": 0, "provisionedThroughput": { "writeCapacityUnits": 25, "numberOfDecreasesToday": 0, "readCapacityUnits": 25 }, "tableStatus": "DELETING", "tableSizeBytes": 0 } }, "requestID": "4KBNVRGD25RG1KEO9UT4V3FQDJVV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "a954451c-c2fc-4561-8aea-7a30ba1fdf52", "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "recipientAccountId": "111122223333" } ] }
CreateCluster
{ "Records": [ { "eventVersion": "1.05", "userIdentity": { "type": "IAMUser", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "userName": "bob" }, "eventTime": "2019-12-17T23:17:34Z", "eventSource": "dax.amazonaws.com", "eventName": "CreateCluster", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.16.304 Python/3.6.9 Linux/4.9.184-0.1.ac.235.83.329.metal1.x86_64 botocore/1.13.40", "requestParameters": { "sSESpecification": { "enabled": true }, "clusterName": "daxcluster", "nodeType": "dax.r4.large", "replicationFactor": 3, "iamRoleArn": "arn:aws:iam::111122223333:role/DAXServiceRoleForDynamoDBAccess" }, "responseElements": { "cluster": { "securityGroups": [ { "securityGroupIdentifier": "sg-1af6e36e", "status": "active" } ], "parameterGroup": { "nodeIdsToReboot": [], "parameterGroupName": "default.dax1.0", "parameterApplyStatus": "in-sync" }, "clusterDiscoveryEndpoint": { "port": 8111 }, "clusterArn": "arn:aws:dax:us-west-2:111122223333:cache/daxcluster", "status": "creating", "subnetGroup": "default", "sSEDescription": { "status": "ENABLED", "kMSMasterKeyArn": "arn:aws:kms:us-west-2:111122223333:key/764898e4-adb1-46d6-a762-e2f4225b4fc4" }, "iamRoleArn": "arn:aws:iam::111122223333:role/DAXServiceRoleForDynamoDBAccess", "clusterName": "daxcluster", "activeNodes": 0, "totalNodes": 3, "preferredMaintenanceWindow": "thu:13:00-thu:14:00", "nodeType": "dax.r4.large" } }, "requestID": "585adc5f-ad05-4e27-8804-70ba1315f8fd", "eventID": "29158945-28da-4e32-88e1-56d1b90c1a0c", "eventType": "AwsApiCall", "recipientAccountId": "111122223333" } ] }
PutItem
(Successful)
{ "Records": [ { "eventVersion": "1.06", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2015-05-28T18:06:01Z" }, "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" } } }, "eventTime": "2019-01-19T15:41:54Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "PutItem", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.15.64 Python/2.7.16 Darwin/17.7.0 botocore/1.10.63", "requestParameters": { "tableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Scared of My Shadow" }, "item": [ "Artist", "SongTitle", "AlbumTitle" ], "returnConsumedCapacity": "TOTAL" }, "responseElements": null, "requestID": "4KBNVRGD25RG1KEO9UT4V3FQDJVV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "a954451c-c2fc-4561-8aea-7a30ba1fdf52", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::DynamoDB::Table", "ARN": "arn:aws:dynamodb:us-west-2:123456789012:table/Music" } ], "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "managementEvent": false, "recipientAccountId": "111122223333", "eventCategory": "Data" } ] }
UpdateItem
(Unsuccessful)
{ "Records": [ { "eventVersion": "1.07", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" }, "attributes": { "creationDate": "2020-09-03T22:14:13Z", "mfaAuthenticated": "false" } } }, "eventTime": "2020-09-03T22:27:15Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "UpdateItem", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.15.64 Python/2.7.16 Darwin/17.7.0 botocore/1.10.63", "errorCode": "ConditionalCheckFailedException", "errorMessage": "The conditional request failed", "requestParameters": { "tableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Call Me Today" }, "updateExpression": "SET #Y = :y, #AT = :t", "expressionAttributeNames": { "#Y": "Year", "#AT": "AlbumTitle" }, "conditionExpression": "attribute_not_exists(#Y)", "returnConsumedCapacity": "TOTAL" }, "responseElements": null, "requestID": "4KBNVRGD25RG1KEO9UT4V3FQDJVV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "a954451c-c2fc-4561-8aea-7a30ba1fdf52", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::DynamoDB::Table", "ARN": "arn:aws:dynamodb:us-west-2:123456789012:table/Music" } ], "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "managementEvent": false, "recipientAccountId": "111122223333", "eventCategory": "Data" } ] }
TransactWriteItems (Successful)
{ "Records": [ { "eventVersion": "1.07", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" }, "attributes": { "creationDate": "2020-09-03T22:14:13Z", "mfaAuthenticated": "false" } } }, "eventTime": "2020-09-03T21:48:12Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "TransactWriteItems", "awsRegion": "us-west-1", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.15.64 Python/2.7.16 Darwin/17.7.0 botocore/1.10.63", "requestParameters": { "requestItems": [ { "operation": "Put", "tableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Call Me Today" }, "items": [ "Artist", "SongTitle", "AlbumTitle" ], "conditionExpression": "#AT = :A", "expressionAttributeNames": { "#AT": "AlbumTitle" }, "returnValuesOnConditionCheckFailure": "ALL_OLD" }, { "operation": "Update", "tableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Call Me Tomorrow" }, "updateExpression": "SET #AT = :newval", "ConditionExpression": "attribute_not_exists(Rating)", "ExpressionAttributeNames": { "#AT": "AlbumTitle" }, "returnValuesOnConditionCheckFailure": "ALL_OLD" }, { "operation": "Delete", "TableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Call Me Yesterday" }, "conditionExpression": "#P between :lo and :hi", "expressionAttributeNames": { "#P": "Price" }, "ReturnValuesOnConditionCheckFailure": "ALL_OLD" }, { "operation": "ConditionCheck", "TableName": "Music", "Key": { "Artist": "No One You Know", "SongTitle": "Call Me Now" }, "ConditionExpression": "#P between :lo and :hi", "ExpressionAttributeNames": { "#P": "Price" }, "ReturnValuesOnConditionCheckFailure": "ALL_OLD" } ], "returnConsumedCapacity": "TOTAL", "returnItemCollectionMetrics": "SIZE" }, "responseElements": null, "requestID": "45EN32OM6TQSMV2MI65O4L5TNFVV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "4f1cc78b-5c94-4174-a6ad-3ee78605381c", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::DynamoDB::Table", "ARN": "arn:aws:dynamodb:us-west-2:123456789012:table/Music" } ], "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "managementEvent": false, "recipientAccountId": "111122223333", "eventCategory": "Data" } ] }
TransactWriteItems (With
TransactionCanceledException)
{ "Records": [ { "eventVersion": "1.06", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" }, "attributes": { "creationDate": "2020-09-03T22:14:13Z", "mfaAuthenticated": "false" } } }, "eventTime": "2019-02-01T00:42:34Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "TransactWriteItems", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.16.93 Python/3.4.7 Linux/4.9.119-0.1.ac.277.71.329.metal1.x86_64 botocore/1.12.83", "errorCode": "TransactionCanceledException", "errorMessage": "Transaction cancelled, please refer cancellation reasons for specific reasons [ConditionalCheckFailed, None]", "requestParameters": { "requestItems": [ { "operation": "Put", "tableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Call Me Today" }, "items": [ "Artist", "SongTitle", "AlbumTitle" ], "conditionExpression": "#AT = :A", "expressionAttributeNames": { "#AT": "AlbumTitle" }, "returnValuesOnConditionCheckFailure": "ALL_OLD" }, { "operation": "Update", "tableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Call Me Tomorrow" }, "updateExpression": "SET #AT = :newval", "ConditionExpression": "attribute_not_exists(Rating)", "ExpressionAttributeNames": { "#AT": "AlbumTitle" }, "returnValuesOnConditionCheckFailure": "ALL_OLD" }, { "operation": "Delete", "TableName": "Music", "key": { "Artist": "No One You Know", "SongTitle": "Call Me Yesterday" }, "conditionExpression": "#P between :lo and :hi", "expressionAttributeNames": { "#P": "Price" }, "ReturnValuesOnConditionCheckFailure": "ALL_OLD" }, { "operation": "ConditionCheck", "TableName": "Music", "Key": { "Artist": "No One You Know", "SongTitle": "Call Me Now" }, "ConditionExpression": "#P between :lo and :hi", "ExpressionAttributeNames": { "#P": "Price" }, "ReturnValuesOnConditionCheckFailure": "ALL_OLD" } ], "returnConsumedCapacity": "TOTAL", "returnItemCollectionMetrics": "SIZE" }, "responseElements": null, "requestID": "A0GTQEKLBB9VD8E05REA5A3E1VVV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "43e437b5-908a-46af-84e6-e27fffb9c5cd", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::DynamoDB::Table", "ARN": "arn:aws:dynamodb:us-west-2:123456789012:table/Music" } ], "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "managementEvent": false, "recipientAccountId": "111122223333", "eventCategory": "Data" } ] }
ExecuteStatement
{ "Records": [ { "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" }, "attributes": { "creationDate": "2020-09-03T22:14:13Z", "mfaAuthenticated": "false" } } }, "eventTime": "2021-03-03T23:06:45Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "ExecuteStatement", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.19.7 Python/3.6.13 Linux/4.9.230-0.1.ac.223.84.332.metal1.x86_64 botocore/1.20.7", "requestParameters": { "statement": "SELECT * FROM Music WHERE Artist = 'No One You Know' AND SongTitle = 'Call Me Today' AND nonKeyAttr = ***(Redacted)" }, "responseElements": null, "requestID": "V7G2KCSFLP83ORB7MMFG6RIAD3VV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "0b5c4779-e169-4227-a1de-6ed01dd18ac7", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::DynamoDB::Table", "ARN": "arn:aws:dynamodb:us-west-2:123456789012:table/Music" } ], "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "managementEvent": false, "recipientAccountId": "111122223333", "eventCategory": "Data" } ] }
BatchExecuteStatement
{ "Records": [ { "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" }, "attributes": { "creationDate": "2020-09-03T22:14:13Z", "mfaAuthenticated": "false" } } }, "eventTime": "2021-03-03T23:24:48Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "BatchExecuteStatement", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.19.7 Python/3.6.13 Linux/4.9.230-0.1.ac.223.84.332.metal1.x86_64 botocore/1.20.7", "requestParameters": { "requestItems": [ { "statement": "UPDATE Music SET Album = ***(Redacted) WHERE Artist = 'No One You Know' AND SongTitle = 'Call Me Today'" }, { "statement": "INSERT INTO Music VALUE {'Artist' : ***(Redacted), 'SongTitle' : ***(Redacted), 'Album' : ***(Redacted)}" } ] }, "responseElements": null, "requestID": "23PE7ED291UD65P9SMS6TISNVBVV4KQNSO5AEMVJF66Q9ASUAAJG", "eventID": "f863f966-b741-4c36-b15e-f867e829035a", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::DynamoDB::Table", "ARN": "arn:aws:dynamodb:us-west-2:123456789012:table/Music" } ], "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "managementEvent": false, "recipientAccountId": "111122223333", "eventCategory": "Data" } ] }
GetRecords
{ "Records": [ { "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", "principalId": "AKIAIOSFODNN7EXAMPLE:bob", "arn": "arn:aws:sts::111122223333:assumed-role/users/bob", "accountId": "111122223333", "accessKeyId": "AKIAIOSFODNN7EXAMPLE", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "AKIAI44QH8DHBEXAMPLE", "arn": "arn:aws:iam::444455556666:role/admin-role", "accountId": "444455556666", "userName": "bob" }, "attributes": { "creationDate": "2020-09-03T22:14:13Z", "mfaAuthenticated": "false" } } }, "eventTime": "2021-04-15T04:15:02Z", "eventSource": "dynamodb.amazonaws.com", "eventName": "GetRecords", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "aws-cli/1.19.50 Python/3.6.13 Linux/4.9.230-0.1.ac.224.84.332.metal1.x86_64 botocore/1.20.50", "requestParameters": { "shardIterator": "arn:aws:dynamodb:us-west-2:123456789012:table/Music/stream/2021-04-15T04:02:47.428|1|AAAAAAAAAAH7HF3xwDQHBrvk2UBZ1PKh8bX3F+JeH0rFwHCE7dz4VGV1ZoJ5bMxQwkmerA3wzCTL+zSseGLdSXNJP14EwrjLNvDNoZeRSJ/n6xc3I4NYOptR4zR8d7VrjMAD6h5nR12NtxGIgJ/dVsUpluWsHyCW3PPbKsMlJSruVRWoitRhSd3S6slEWEPB0bDC7++ISH5mXrCHOnvyezQKlqNshTSPZ5jWwqRj2VNSXCMTGXv9P01/U0bpOUI2cuRTchgUpPSe3ur2sQrRj3KlbmIyCz7P+H3CYlugafi8fQ5kipDSkESkIWS6O5ejzibWKg/3izms1eVIm/zLFdEeihCYJ7G8fpHUSLX5JAk3ab68aUXGSFEZLONntgNIhQkcMo00/mJlaIgkEdBUyqvZO1vtKUBH5YonIrZqSUhv8Coc+mh24vOg1YI+SPIXlr+Lnl54BG6AjrmaScjHACVXoPDxPsXSJXC4c9HjoC3YSskCPV7uWi0f65/n7JAT3cskcX2ISaLHwYzJPaMBSftxOgeRLm3BnisL32nT8uTj2gF/PUrEjdyoqTX7EerQpcaekXmOgay5Kh8n4T2uPdM83f356vRpar/DDp8pLFD0ddb6Yvz7zU2zGdAvTod3IScC1GpTqcjRxaMhlBVZy1TnI9Cs+7fXMdUF6xYScjR2725icFBNLojSFVDmsfHabXaCEpmeuXZsLbp5CjcPAHa66R8mQ5tSoFjrzOEzeB4uconEXAMPLE==" }, "responseElements": null, "requestID": "1M0U1Q80P4LDPT7A7N1A758N2VVV4KQNSO5AEMVJF66Q9EXAMPLE", "eventID": "09a634f2-da7d-4c9e-a259-54aceexample", "readOnly": true, "resources": [ { "accountId": "111122223333", "type": "AWS::DynamoDB::Table", "ARN": "arn:aws:dynamodb:us-west-2:123456789012:table/Music" } ], "eventType": "AwsApiCall", "apiVersion": "2012-08-10", "managementEvent": false, "recipientAccountId": "111122223333", "eventCategory": "Data" } ] }