log.json

{  "id": 1,  "awsRegion": "ap-southeast-2",  "eventCategory": "Management",  "eventID": "d588ddca-7441-4866-9197-3c25a05c4b5d",  "eventName": "DescribeInstances",  "eventSource": "ec2.amazonaws.com",  "eventTime": "2025-05-23T09:01:24Z",  "eventType": "AwsApiCall",  "eventVersion": "1.10",  "identityAccountId": "103164125733",  "issuerAccountId": "438465128930",  "managementEvent": true,  "readOnly": true,  "recipientAccountId": "438465128930",  "requestID": "5902cc55-9e7f-4373-bed9-069305dcbf54",  "requestParameters": {    "filterSet": {},    "instancesSet": {}  },  "responseElements": null,  "sourceIPAddress": "101.44.82.95",  "tlsDetails": {    "cipherSuite": "TLS_AES_128_GCM_SHA256",    "clientProvidedHostHeader": "ec2.ap-southeast-2.amazonaws.com",    "tlsVersion": "TLSv1.3"  },  "userAgent": "stratus-red-team_7092f0da-0a76-4b8e-b136-eb5ea1d7d5ec",  "userIdentity": {    "accessKeyId": "ASIAWMFUO5HRNCJ7VF5V",    "accountId": "103164125733",    "arn": "arn:aws:sts::103164125733:assumed-role/stratus-red-team-ec2-steal-credentials-role/i-02299a25947b0226d",    "principalId": "AROAWMFUO5HRMMR7MYWAN:i-02299a25947b0226d",    "sessionContext": {      "attributes": {        "creationDate": "2025-05-23T08:59:50Z",        "mfaAuthenticated": "false"      },      "ec2RoleDelivery": "1.0",      "sessionIssuer": {        "accountId": "438465128930",        "arn": "arn:aws:iam::438465128930:role/stratus-red-team-ec2-steal-credentials-role",        "principalId": "AROAWMFUO5HRMMR7MYWAN",        "type": "Role",        "userName": "stratus-red-team-ec2-steal-credentials-role"      }    },    "type": "AssumedRole"  },  "userIdentity.type": "AssumedRole"}