event.json

{
    "Records": [
        {
            "awsRegion": "eu-west-1",
            "eventID": "0ed50878-9f42-4e73-a361-2d19ee0a61d7",
            "eventName": "LookupEvents",
            "eventSource": "cloudtrail.amazonaws.com",
            "eventTime": "2015-11-22T12:26:22Z",
            "eventType": "AwsApiCall",
            "eventVersion": "1.04",
            "recipientAccountId": "XXX",
            "requestID": "3dd300fe-9114-11e5-a9f7-e1076ccb02b6",
            "requestParameters": {
                "lookupAttributes": [
                    {
                        "attributeKey": "EventName",
                        "attributeValue": "RegisterContainerInstance"
                    }
                ],
                "maxResults": 50
            },
            "responseElements": null,
            "sourceIPAddress": "185.11.38.137",
            "userAgent": "signin.amazonaws.com",
            "userIdentity": {
                "accessKeyId": "XXX",
                "accountId": "XXX",
                "arn": "arn:aws:iam::XXX:user/XXX",
                "invokedBy": "signin.amazonaws.com",
                "principalId": "AIDAIXDLZ6U7R3GJOXLUK",
                "sessionContext": {
                    "attributes": {
                        "creationDate": "2015-11-22T12:25:00Z",
                        "mfaAuthenticated": "true"
                    }
                },
                "type": "IAMUser",
                "userName": "XXX"
            }
        }
    ]
}