Change log for AWS_CONTROL_TOWER
| Date | Changes |
|---|---|
| 2024-03-17 | Enhancement:
- Mapped "req.userIdentity.arn" and "req.userIdentity.userName" to "target.user.userid". |
| 2023-01-04 | Enhancement:
- Initialized variables to avoid replication of data in the For loop. |
| 2022-12-15 | Enhancement:
- Mapped 'metadata.vendor_name' to 'AWS'. - Mapped 'metadata.product_name' to 'AWS Control Tower'. - Mapped 'metadata.event_type' to 'USER_LOGIN' when 'eventName' is 'ConsoleLogin'. - Mapped 'security_result.severity' to 'INFORMATIONAL' when 'eventName' is 'ConsoleLogin'. |
| 2022-11-17 | Enhancement:
- Mapped 'req.userIdentity.userName' and 'req.userIdentity.sessionContext.sessionIssuer.userName' to 'target.user.id'. - Mapped 'ConsoleLogin:Success' to 'security_result.action'. - Mapped port information from 'sourceIPAddress' to 'principal.port'. |
| 2022-10-31 | Enhancement: New Parser created.
|